Static task
static1
Behavioral task
behavioral1
Sample
16a2eae1a9a0d36c8b11f2464960032d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16a2eae1a9a0d36c8b11f2464960032d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
16a2eae1a9a0d36c8b11f2464960032d_JaffaCakes118
-
Size
21KB
-
MD5
16a2eae1a9a0d36c8b11f2464960032d
-
SHA1
7b5aaacd9adadb03f0a79ab0a6eccc49178df228
-
SHA256
f9763c9be7f4bf24fa12f85741a843d8c44c1e80ad2d9332e69c34fc121b90fc
-
SHA512
224cb497cfa9b3a14ccc82decdd9ccccaf0b1b9ac0b37d2c01f02518b9f755d00d484825312d449dc023a85edd2fe28fe3e18940dc0c115f48b8539bbf505722
-
SSDEEP
384:LomKRSeLRAyMNRZQWa9DrkKwx72H2xSGjY6j365fVr4HR9AauKedDdc:LobLRAyGUDgKwxCWks3gtUHx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16a2eae1a9a0d36c8b11f2464960032d_JaffaCakes118
Files
-
16a2eae1a9a0d36c8b11f2464960032d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
;�U�J��� Size: - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rD����� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE