Static task
static1
Behavioral task
behavioral1
Sample
c16859263e8ee712cc773c156bf4dac1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c16859263e8ee712cc773c156bf4dac1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c16859263e8ee712cc773c156bf4dac1_JaffaCakes118
-
Size
822KB
-
MD5
c16859263e8ee712cc773c156bf4dac1
-
SHA1
8165cb54bd0bd5a289645c96a5ff8a0ee12d0d4c
-
SHA256
ebe1a5e9f3121e4e5600737517ab8676966bf110d66e79f038250d8ccd453432
-
SHA512
c466eee2c54570a19eb6480f8a1fef40c1cd1aa780c463cc035e8aa0b3e3113f9679ddb6f3c0573082a3088aef2089d7f61113ad2b8a1c3cafb3694ff06606ff
-
SSDEEP
6144:UZfec9EbXDk6Rk8KFHrG1VVE+IRuHOOHrG1VVE+IRuHOOHrG1VVE+IOrRi/UOPS9:UZWtI6Rk7Lu9OOLu9OOLu5rRVOB0H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c16859263e8ee712cc773c156bf4dac1_JaffaCakes118
Files
-
c16859263e8ee712cc773c156bf4dac1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ