Static task
static1
Behavioral task
behavioral1
Sample
16fed08485778fc00c4c7ccb2137cd20_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16fed08485778fc00c4c7ccb2137cd20_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16fed08485778fc00c4c7ccb2137cd20_JaffaCakes118
-
Size
319KB
-
MD5
16fed08485778fc00c4c7ccb2137cd20
-
SHA1
ac63915e6aae027b14cf0ca6a83c64a7db199bfa
-
SHA256
4e6c74f931f75e009f3e1a4e8093b2386435fcfce9104f3c2ff1e4a097bd0214
-
SHA512
627f619c1498e297ca1fb80a66be2091d47c2771ff3e15e8ac7c920c4f7651868128f02c7fb327e585c204227633a81e89e14a7fd3e1e04a2fff62ff70f271aa
-
SSDEEP
3072:Nf86wtgHEqot7V6cK5WKE7bRt6YsnM0ZfiWjVsyHWMr9PN+DFz8KMv2FRh4kyDJE:Rkg8vKlYs3QWJgMrBy8KaYRh4kyV6kC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16fed08485778fc00c4c7ccb2137cd20_JaffaCakes118
Files
-
16fed08485778fc00c4c7ccb2137cd20_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ddad Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspk Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE