Static task
static1
Behavioral task
behavioral1
Sample
16afd96a4eadd7466bc4a592ebeb3cd5_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
16afd96a4eadd7466bc4a592ebeb3cd5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
16afd96a4eadd7466bc4a592ebeb3cd5_JaffaCakes118
-
Size
16KB
-
MD5
16afd96a4eadd7466bc4a592ebeb3cd5
-
SHA1
746b45b99d8275fdd45c2066aa22800478b69a7f
-
SHA256
5a19efb8a71777fd8a9209d9144b9675529d6ced6a38970105945183fcdf04e7
-
SHA512
8ad0107865f7adf15f34c06e308bba9aaf4892a30b888d0958327300dc9f110080da9dcebbfad40e75f493bc9a6aa76716aeb49c651977dd1869422a056c8b3a
-
SSDEEP
384:m3y5r4/WY+CUkQaUNlDnQNPnM1zRku/f5L77m+9U6ll9PeHoaH:UyquJNlDnQNPM1zRHld9UK9mN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16afd96a4eadd7466bc4a592ebeb3cd5_JaffaCakes118
Files
-
16afd96a4eadd7466bc4a592ebeb3cd5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE