Static task
static1
Behavioral task
behavioral1
Sample
616b2484f78a95385e909606aab1b83a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
616b2484f78a95385e909606aab1b83a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
616b2484f78a95385e909606aab1b83a_JaffaCakes118
-
Size
198KB
-
MD5
616b2484f78a95385e909606aab1b83a
-
SHA1
6a54c59475ca0f53b320ee3b8fd28de852def1a4
-
SHA256
3992c826b8e863b28f8042b9f900dc317bbcae94479671bde930fd476fe1f7b5
-
SHA512
a65af05d635e05c4e22d560e94e2d64add55d4d620546aa03d385d53d244e88599024cc398edabad94dc6a5e76b33683180f37d9652ebbc77806ac4d872b1c26
-
SSDEEP
6144:Y+i1JBW/bn5RTcZE3UMMSs7RvNlv9URrjx80yJ3IE:Y51KTn5RF3lbs7RVlFcfK0y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 616b2484f78a95385e909606aab1b83a_JaffaCakes118
Files
-
616b2484f78a95385e909606aab1b83a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 193KB - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE