Static task
static1
Behavioral task
behavioral1
Sample
16db934d0f15a0c27988a941c5a5cd15_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16db934d0f15a0c27988a941c5a5cd15_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
16db934d0f15a0c27988a941c5a5cd15_JaffaCakes118
-
Size
256KB
-
MD5
16db934d0f15a0c27988a941c5a5cd15
-
SHA1
0d08269d42f23a43c7096eab8f4efcf5936b338a
-
SHA256
96c6a5d6fc9b942db4e394ab408823f7c8bd39cce298717f2e7b0eab4d74f770
-
SHA512
fc73c02d96082f28a34321c5eafcfe120286a3d4a1b6a7e0a56f3f017c27d738eb9fc5f0c4729ce5ad2c41818ab77cbe71cc1155b5715ef9d6334bc608aa10fa
-
SSDEEP
96:78w2ys+nZakToFWssqONdy1P01OoT4kw+IBWy0nL:N2yagJssqQdyd7oTmlBWhL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16db934d0f15a0c27988a941c5a5cd15_JaffaCakes118
Files
-
16db934d0f15a0c27988a941c5a5cd15_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 244KB - Virtual size: 860KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE