Static task
static1
Behavioral task
behavioral1
Sample
f23a20504ffcf33073e3a59b7a789a9b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f23a20504ffcf33073e3a59b7a789a9b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f23a20504ffcf33073e3a59b7a789a9b_JaffaCakes118
-
Size
1.5MB
-
MD5
f23a20504ffcf33073e3a59b7a789a9b
-
SHA1
a3ae9c8f5e2ca79f540d55fc8bf4ee869e134653
-
SHA256
129aaed5d8e6481e8d8865d04f69169947d333303155958ca4bfb28211038a7f
-
SHA512
57b38254b35bafc89797e4df84647961911001fe2f5ddcaabede3a6e95010486efe19a0aea621535fa6cf8500492a735eab9cde362cc7b9d42ab6110a25f1f94
-
SSDEEP
24576:1tjWxHc31FgBkN3XAP+Mzb10hJaothZ2/T6FBBjNPI5lqkfZSkHR82b10hJaothd:1tIBqnA24/ofqg4/ofp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f23a20504ffcf33073e3a59b7a789a9b_JaffaCakes118
Files
-
f23a20504ffcf33073e3a59b7a789a9b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ