Static task
static1
Behavioral task
behavioral1
Sample
16aef8c81d676b5f41eb95d8ca02760d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16aef8c81d676b5f41eb95d8ca02760d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
16aef8c81d676b5f41eb95d8ca02760d_JaffaCakes118
-
Size
639KB
-
MD5
16aef8c81d676b5f41eb95d8ca02760d
-
SHA1
6cad6eb8ead4abeafa575fb2c0445e94fbe8521c
-
SHA256
93e7d2a6c87f1d943bf2ac018e7de1a56ffcbd4d933b5a5e302848eb6b4b7ae7
-
SHA512
89b8ac7c80add5f10dd4d76d60d976517da88edea1c6f7bba4104a44d66db5bb1ef305a222279d6908269187c0c46eb3d1034eb791971dcb1f7ca187981903b9
-
SSDEEP
12288:1vvMF68j0nl+Bdx6RCsaC8h8XJmiOI8J5CEXOrf7m5sF2hjJnDraann2dT:+jd9hEJmiOqEITRFOuanY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16aef8c81d676b5f41eb95d8ca02760d_JaffaCakes118
Files
-
16aef8c81d676b5f41eb95d8ca02760d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 638KB - Virtual size: 638KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE