Static task
static1
Behavioral task
behavioral1
Sample
160f586bd0d20c1f9c525d97cd8b0b6d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
160f586bd0d20c1f9c525d97cd8b0b6d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
160f586bd0d20c1f9c525d97cd8b0b6d_JaffaCakes118
-
Size
52KB
-
MD5
160f586bd0d20c1f9c525d97cd8b0b6d
-
SHA1
5319791d9079e42c910d7a846a11a763abe04d18
-
SHA256
9fd05cb3da88b1e70762f585be1bbe46720e1d6f71dcd658670850de7b2ea105
-
SHA512
1b0669b7b8f515c9de4097c5d7d62d1163ce878ba1ae2a713cae867106b64360c6cc8693e7f28d581a5352e7354e3e1ac0729c86a0c4a2acb3dc4d0233066340
-
SSDEEP
768:BCxDbY3dXCMnO1HiotGT6A7hiTwW/LSQjtFpMUZl6o/MyjkB3AvL:ARY317nFTzhuwQ7jmUqWMyjktqL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 160f586bd0d20c1f9c525d97cd8b0b6d_JaffaCakes118
Files
-
160f586bd0d20c1f9c525d97cd8b0b6d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 25KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 198KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE