Static task
static1
Behavioral task
behavioral1
Sample
616d69fe812baa63eb731ab79901671a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
616d69fe812baa63eb731ab79901671a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
616d69fe812baa63eb731ab79901671a_JaffaCakes118
-
Size
5KB
-
MD5
616d69fe812baa63eb731ab79901671a
-
SHA1
43d2a7913a61e1e78657a68f091341151ecaa679
-
SHA256
512e9558d7c499e87fe6ba5b3fce07d3a0afe06dfb3ff6df4642c88c3af848f7
-
SHA512
fdd96cabf967ad9ec2dad5d8acb8f191a914a107295b11b814f98c4d69cbdb2e17cf3263028f46c88be87ee391a74561789a3afce3ca6587051eeacdee6866e8
-
SSDEEP
48:CAQnKiMgOKPFTOs6CN9l+u5mKwwl87kFq56ID:gnRF/NTOsVN9Jw687kFq53D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 616d69fe812baa63eb731ab79901671a_JaffaCakes118
Files
-
616d69fe812baa63eb731ab79901671a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ