Static task
static1
Behavioral task
behavioral1
Sample
16206fb91e51868e07ff13f27a75b75d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16206fb91e51868e07ff13f27a75b75d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16206fb91e51868e07ff13f27a75b75d_JaffaCakes118
-
Size
224KB
-
MD5
16206fb91e51868e07ff13f27a75b75d
-
SHA1
6fcfb4fe5b3da8aa8efdff634c77727d95688d84
-
SHA256
7e49f5860c4abe01692a50ed7c9307e0500bc2e676f8773ca545d1765869aea9
-
SHA512
494a48285ad41b704c53f6ccdac49756c9380b24e5151b2a1b9e4d1a068f55ab39383a3793e5983bd4f885c9c5273cf780af08735ad9a218890b3eb5268af999
-
SSDEEP
6144:1CxAgzRBcOTCLndi2Zyz8hDSlAYtJTqKHIWJ8uIM8z:1ELC+e+lAYDTeWCuIM8z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16206fb91e51868e07ff13f27a75b75d_JaffaCakes118
Files
-
16206fb91e51868e07ff13f27a75b75d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 616KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 220KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE