Static task
static1
Behavioral task
behavioral1
Sample
16dfb471ccac24a6e236d98cc0aea658_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16dfb471ccac24a6e236d98cc0aea658_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
16dfb471ccac24a6e236d98cc0aea658_JaffaCakes118
-
Size
48KB
-
MD5
16dfb471ccac24a6e236d98cc0aea658
-
SHA1
b8145bc260b8007de2893ee6aafbca68079c0812
-
SHA256
8f59cefb1b911c99e8ba182571fc70c6f2b5b5f82df2c737d1ff49d8060a2ddc
-
SHA512
17d3c4676069c0726095ddf0e7c80e5157adc4e4a29956e77fa69b5bae861d768f94f08ae86607ed56821d48ea12de5624a0cd82cdc27de716cca926da9c5321
-
SSDEEP
768:1KoUcZoZhAzS2TglLGqz8gGRKXz9boTjxCjP70DrP1yP4/hsSDqPDm/opZn:1ocHhoagf8Tjo03WLPaon
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16dfb471ccac24a6e236d98cc0aea658_JaffaCakes118
Files
-
16dfb471ccac24a6e236d98cc0aea658_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ