Static task
static1
Behavioral task
behavioral1
Sample
16ea40c70d143d618a5675fa138f1237_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
16ea40c70d143d618a5675fa138f1237_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
16ea40c70d143d618a5675fa138f1237_JaffaCakes118
-
Size
59KB
-
MD5
16ea40c70d143d618a5675fa138f1237
-
SHA1
80fc3b4b754d6277cf143cc0a0f51b42c8d4a565
-
SHA256
01f0675c3dd14c16a24fae3afd1c25e0895ab5eee3ae57ba441ea05761c41fb5
-
SHA512
1c4f2255b0c72f700daa3234e0e95637ed8b8ab715837f313d51ced5d6468afed41ab6a63cf355700fe836ee3df25c8cbc849e0b768b8a8d018474039cb25476
-
SSDEEP
1536:m8XmshxhlDjq/waHTimprVlBQ3NN5AFrJ451z:my9lD2YaOmprVqNNC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16ea40c70d143d618a5675fa138f1237_JaffaCakes118
Files
-
16ea40c70d143d618a5675fa138f1237_JaffaCakes118.exe windows:47056 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
qrrzziib Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
iiqjrqjy Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
barijjaq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yqiaqjjr Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ