Static task
static1
Behavioral task
behavioral1
Sample
163a3a979c7a49a1187bdbf385ae6924_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
163a3a979c7a49a1187bdbf385ae6924_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
163a3a979c7a49a1187bdbf385ae6924_JaffaCakes118
-
Size
73KB
-
MD5
163a3a979c7a49a1187bdbf385ae6924
-
SHA1
22e55f354231afe406027754591a1306a6da0626
-
SHA256
e465ccbcd3dd0880bb69ff74b73063760ad4c6a17cf5376e3559ccc22378396c
-
SHA512
98e124053affc7289fc5ce9063d63bf449e104cbe936bfc85c9af2e20db74bfca55ff6b35ffa2a021e9291089f730125d4a2283c25552b978f51c864a733629c
-
SSDEEP
1536:E2Tk+hShZH08nhRGhq3ID/3T5q8YzsJwJKGosteBqDjYEnQ/4+lcU:E4P6e8nhjIj3s8YzQO5/D3Q/4jU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 163a3a979c7a49a1187bdbf385ae6924_JaffaCakes118
Files
-
163a3a979c7a49a1187bdbf385ae6924_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
+c�0 Size: - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text1 Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
code2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE