Static task
static1
Behavioral task
behavioral1
Sample
16a57d63d4b70ed86300a091057d7920_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16a57d63d4b70ed86300a091057d7920_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16a57d63d4b70ed86300a091057d7920_JaffaCakes118
-
Size
25KB
-
MD5
16a57d63d4b70ed86300a091057d7920
-
SHA1
9e9f5fa91afce1127fa933b11eac53c3c345ae0f
-
SHA256
d15e16a993eea0d6ed94a154284adbec6e5d76affd78808f8e39664b6fa65227
-
SHA512
2227bc7a9a974f07bf36277805d9f0648bc0a1cef7edcdf622ae99757e99377da458bed1db9421ae57989301866b3ab91e450a9f59b1ce24d21229ec47605c51
-
SSDEEP
384:9x6vV+c4J3FXTWWEQ5BSKUZ0UD7i8NBBrX1zClYs:9xyMc+FXTWWf+Z0UD7xBelYs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16a57d63d4b70ed86300a091057d7920_JaffaCakes118
Files
-
16a57d63d4b70ed86300a091057d7920_JaffaCakes118.exe windows:4 windows x86 arch:x86
c119df5541f9eb9977b5e494f1569ae7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord271
ord497
ord250
ord319
ord253
ord766
ord730
ord781
ord364
ord490
ord744
ord775
ord769
ord246
ord370
ord374
ord778
ord461
ord465
ord740
ord714
ord463
ord464
ord397
ord334
ord654
ord361
ord276
ord282
ord729
ord323
ord269
ord321
ord713
ord268
ord350
ord592
ord306
ord704
ord214
ord429
ord686
ord395
ord352
ord289
user32
ord565
ord530
ord136
ord135
ord142
ord543
ord268
ord575
ord86
ord614
ord220
ord10
ord439
ord432
ord178
ord48
ord228
ord494
ord559
ord434
ord128
ord207
ord217
ord365
ord467
ord291
ord379
ord385
ord287
ord375
ord231
ord307
ord403
gdi32
ord424
ord327
ord376
ord324
ord308
advapi32
ord151
ord194
ord182
ord154
ord174
ord160
ord193
shell32
ord328
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 933B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 950B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ