Static task
static1
Behavioral task
behavioral1
Sample
16156e2788e641222cc58e4d2b163d25_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16156e2788e641222cc58e4d2b163d25_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16156e2788e641222cc58e4d2b163d25_JaffaCakes118
-
Size
820KB
-
MD5
16156e2788e641222cc58e4d2b163d25
-
SHA1
8bdaea130236e130a835224e069b08c326f82858
-
SHA256
65e2b0e28d01c5a99b6f18d4129ffb9ccd4a568eed5f97a5deba4fde3a8c124f
-
SHA512
9231ba84cd92cd6544bb8ceb8fbbad8636db4d56baaefe1a2116b66c86247497db29a30b8ef3566ef875515a7258e88ca4d22e73ff618f930c44518df4177eeb
-
SSDEEP
24576:LPCnrRH81OocT5AH/ToMtcqwnD0B+OjoDc:Lqnl8IocSHM9nwB4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16156e2788e641222cc58e4d2b163d25_JaffaCakes118
Files
-
16156e2788e641222cc58e4d2b163d25_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c2d3c56017ffc9f272aae4a4d190dcc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
Sections
UnderPl Size: 685KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UnderPl Size: 71KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UnderPl Size: 7KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UnderPl Size: 512B - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UnderPl Size: 512B - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UnderPl Size: 512B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UnderPl Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UnderPl Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE