Static task
static1
Behavioral task
behavioral1
Sample
16c80d4cd1baa39717257a1cae9f6eb4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
16c80d4cd1baa39717257a1cae9f6eb4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
16c80d4cd1baa39717257a1cae9f6eb4_JaffaCakes118
-
Size
29KB
-
MD5
16c80d4cd1baa39717257a1cae9f6eb4
-
SHA1
4194433b0521f6965244d209f8c240f8ac018c7e
-
SHA256
a53c0dd1984b365d1e9aa488ea59070320382afda01a86fd2a950ab1a0dda5a5
-
SHA512
98ffa381a70c16b35cbb8d49cc11f6df3fd480147c5fc16cbac034bcb30ff7ad34668c2c609df707125026ceb1ab1789a001d67fa5a0d8a335799795a5a9ffc6
-
SSDEEP
768:swcLrIAyJHQ/pOh+BUkhwo6/7IpY+x0o39b+rmpi:swySJHQhu+BUkhwJSVx0o3V8B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16c80d4cd1baa39717257a1cae9f6eb4_JaffaCakes118
Files
-
16c80d4cd1baa39717257a1cae9f6eb4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�1�z0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�1�z1 Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�1�z2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE