Static task
static1
Behavioral task
behavioral1
Sample
164dee24deea7f70cf0c0b17089b4ab9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
164dee24deea7f70cf0c0b17089b4ab9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
164dee24deea7f70cf0c0b17089b4ab9_JaffaCakes118
-
Size
78KB
-
MD5
164dee24deea7f70cf0c0b17089b4ab9
-
SHA1
54f9bb69e48ce4875d3fad84945c0c66660f5474
-
SHA256
72b42f89666180c39e6fd8048eec920b0ae34d306997a00e3af3544e4b6f9f6b
-
SHA512
1fd15b5cfb400c4ff7a2f87329d87952eb1c76bd9996cc8754ab551dee86cba2ba84c4378bc6613010bb90603be32c3d19caaa5570ddd40ed192b8116dd40fb7
-
SSDEEP
1536:88Wuy3wIU6hvcLH4W0VjzqtuYGEDoiYYnU4O/hYxYuOs7mn9ekE/ZrmjB/4TvO2m:Cf+B0iYP/h1uOumnokA2AT19i/Z3D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 164dee24deea7f70cf0c0b17089b4ab9_JaffaCakes118
Files
-
164dee24deea7f70cf0c0b17089b4ab9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 129KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE