Static task
static1
Behavioral task
behavioral1
Sample
16799e4d627195a34ce0ba0a858b310c_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
16799e4d627195a34ce0ba0a858b310c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
16799e4d627195a34ce0ba0a858b310c_JaffaCakes118
-
Size
208KB
-
MD5
16799e4d627195a34ce0ba0a858b310c
-
SHA1
30810fd58f558ebe734c6877a62909dd7dec1d80
-
SHA256
a3f2ac0c4dc581b77a04ae6dcba83648441f0d7411815f36ad4e768ba41f7a57
-
SHA512
97c897a6a3a65ec0775fea3aee0a7dbcec6c9bab90236aa1df42e2a005b4fb538984d9378c95c18ece3dad758eed4c0fe758402c5f968cd0adc82adf54b0b393
-
SSDEEP
6144:S3i3SrynFDojokRplyf7WlIhLEOYPLFugux870sw:e2DojokRyjWahLEOqFug97M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16799e4d627195a34ce0ba0a858b310c_JaffaCakes118
Files
-
16799e4d627195a34ce0ba0a858b310c_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 804KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE