Static task
static1
Behavioral task
behavioral1
Sample
16c21eb45bfdbaa696414a0a06903883_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
16c21eb45bfdbaa696414a0a06903883_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
16c21eb45bfdbaa696414a0a06903883_JaffaCakes118
-
Size
448KB
-
MD5
16c21eb45bfdbaa696414a0a06903883
-
SHA1
7b65ed6295d5cd8f4d8e330b986d0a9c96767b8f
-
SHA256
672ac723fb4de0fc4fd16f1572ca428910bef49e1900c4ebd758aa8af26bf6d8
-
SHA512
88a4efed087bf46d9305073b95e7476bfca6802e52c11294699059ec7ad893a2624fae5a93afc0b812b48e75724870887e143aef4fada51ece03b833a487c818
-
SSDEEP
12288:XmnFyd+3n13WWLtn7HIVFB4rHfvnP9wlxK9DG20sc:XmQd+lNL9OB4rHXP9wlxrL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16c21eb45bfdbaa696414a0a06903883_JaffaCakes118
Files
-
16c21eb45bfdbaa696414a0a06903883_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 436KB - Virtual size: 433KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ