Static task
static1
Behavioral task
behavioral1
Sample
16e3c6880d012accb95152080bf3fe44_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
16e3c6880d012accb95152080bf3fe44_JaffaCakes118
-
Size
144KB
-
MD5
16e3c6880d012accb95152080bf3fe44
-
SHA1
a7e5a3ac4ac2e258fd5df3dd4b8e3f35c755ffea
-
SHA256
e94c2ed9d1c823f90cd77cad80b316ae070fc3eef14a6892a909a77376d58a76
-
SHA512
e613b0129a273f249df72e6dd7668e54c9793783ab0a91d02f62e3f6b4239f3becdbd06471cf979078538040137b1ee1d28f81107b56b8dae4aa7bd68f895d11
-
SSDEEP
3072:laoOcMvyJZdxpucELkKWx6IeEY+be6w3ZtIuwP+MJB9rc53lG:laeKAxpufkkIw+4Kd5Nc53l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16e3c6880d012accb95152080bf3fe44_JaffaCakes118
Files
-
16e3c6880d012accb95152080bf3fe44_JaffaCakes118.exe windows:4 windows x86 arch:x86
7ff4c0bf321014ece3e5e94e7edae5b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
EnterCriticalSection
LoadLibraryA
LeaveCriticalSection
GetProcAddress
Sections
.text Size: 142KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE