Static task
static1
Behavioral task
behavioral1
Sample
163df28f29ad9995c5945da061823e30_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
163df28f29ad9995c5945da061823e30_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
163df28f29ad9995c5945da061823e30_JaffaCakes118
-
Size
44KB
-
MD5
163df28f29ad9995c5945da061823e30
-
SHA1
dde3f4720bdaa7ecdc22bc5b31623e769107bd3c
-
SHA256
3cb57362fc6ea11df3e55811606b768b611366ed703807d41b4af19abc38d7d1
-
SHA512
6180a190f48f607fe8e52c6b4b0e9acc2aa4f35a54f561028f7fee4184c5f13ea41cfb4699e1b3ee93e89df5ee2f5f17a42b1d65a9c9a3a60a7a34da58fe88fc
-
SSDEEP
768:i5VGSfR0OmL8aio5FJ+9fnFO6/4FYsSdxQ5qr5t5JrtnPbtPe/3Fl+m6e:YVG4WTxU9vlQFlr5Y5t5RtDd0l/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 163df28f29ad9995c5945da061823e30_JaffaCakes118
Files
-
163df28f29ad9995c5945da061823e30_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_winzip_ Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ