Static task
static1
Behavioral task
behavioral1
Sample
c16a0acd03d2af23bd98a490a9f99f13_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c16a0acd03d2af23bd98a490a9f99f13_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c16a0acd03d2af23bd98a490a9f99f13_JaffaCakes118
-
Size
124KB
-
MD5
c16a0acd03d2af23bd98a490a9f99f13
-
SHA1
2a2ba7a975f90c4d7c1f5984a5dc2c9ef665c58b
-
SHA256
4e970057df734d8d818876d1db8ba427f67b1a83c80a3e24c7871d5235afd60c
-
SHA512
f48f85f7c9df91b53fc72f01e8c169fb884dba5fa1bbd3b95d1fbd5287d72d6a36c226b2122267e5c78b60a2b24e410015cde74ec8efcf1a9ab2954adcb12f0a
-
SSDEEP
3072:3Nx0rOh/R3loW3NChESz9v5gC278nRSigyJbs+:9xOOhpn/oBgOL13
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c16a0acd03d2af23bd98a490a9f99f13_JaffaCakes118
Files
-
c16a0acd03d2af23bd98a490a9f99f13_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE