Static task
static1
Behavioral task
behavioral1
Sample
16cdf88d0a8871f3ad8cae863c539d3d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16cdf88d0a8871f3ad8cae863c539d3d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16cdf88d0a8871f3ad8cae863c539d3d_JaffaCakes118
-
Size
902KB
-
MD5
16cdf88d0a8871f3ad8cae863c539d3d
-
SHA1
009a3c85513e2d00b93c18072bf425238ca4949a
-
SHA256
5840395e1c57edf347ad82cda9280daa8725b6101721c9a3232b831533e3baa4
-
SHA512
6c79d0396e0bf50492d3b0ecedbe8b1a11155e2e2c3b3fb9e1b7b4061cc0cc1f5061b90d2029221a45cd8343ba121b7bd46b23dd91271b3433305a72edc5e1d3
-
SSDEEP
24576:H/aYFJKZwKroiKifH52QO084m+B7+QmXU3DI:faYFJKnoiTcam+Nmk8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16cdf88d0a8871f3ad8cae863c539d3d_JaffaCakes118
Files
-
16cdf88d0a8871f3ad8cae863c539d3d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 586KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE