Static task
static1
Behavioral task
behavioral1
Sample
16b66b0435174dcd0b7ef466cd41a399_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16b66b0435174dcd0b7ef466cd41a399_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
16b66b0435174dcd0b7ef466cd41a399_JaffaCakes118
-
Size
369KB
-
MD5
16b66b0435174dcd0b7ef466cd41a399
-
SHA1
5fe8e44a41f485b59206b668270a96fae7abc5af
-
SHA256
e3d7282523e057311397d67fe039990be185cf07f60974b030d43ccf1c30a3ce
-
SHA512
e8685d995166deed3555cf8e6f5dfe9abe1b56324d4e1e989ae79f76a9a0b99bb02c72a721fcd7c3699f5eb47cf8feabf793370b64f987cf8bff88bd2db649e3
-
SSDEEP
6144:QRTqP9N4KR33eY2e8xvzdDADTiEmFmiand1YoSaK2Th+nOkS9xONwO/nP1:QJqP9N4KRzI5DsTqFKfTSCmOQCOPN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16b66b0435174dcd0b7ef466cd41a399_JaffaCakes118
Files
-
16b66b0435174dcd0b7ef466cd41a399_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.abcd0 Size: - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.abcd1 Size: 368KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.abcd2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE