Static task
static1
Behavioral task
behavioral1
Sample
16abf1691d3eb569c173113f0de1fc19_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
16abf1691d3eb569c173113f0de1fc19_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
16abf1691d3eb569c173113f0de1fc19_JaffaCakes118
-
Size
46KB
-
MD5
16abf1691d3eb569c173113f0de1fc19
-
SHA1
91ac2987f3d2cadb2a5da518307e8b389cf2a518
-
SHA256
1c63bbf81802c3a075820818d126f44db040f1ad55a8828ab5fe30076118b077
-
SHA512
99771f29657ab97a9108db4e4e0a4f5f888e94b8289ee440419ebc0c194fe24014c7056f09a26145c5c9122cf7e8abdd60d58904cd3764df632d431e698f249b
-
SSDEEP
768:pWPI2zFKYEzRoZ3OUork8LiCCRifXYRF0JR1oBFT6MZwkf0hJwe5LNuaNlLez:kv5TEzRoZ3O4ALCRqXcF0ubT6fJwCRJV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16abf1691d3eb569c173113f0de1fc19_JaffaCakes118
Files
-
16abf1691d3eb569c173113f0de1fc19_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packed Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE