Static task
static1
Behavioral task
behavioral1
Sample
023c33ab415416aee137af170323b414_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
023c33ab415416aee137af170323b414_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
023c33ab415416aee137af170323b414_JaffaCakes118
-
Size
98KB
-
MD5
023c33ab415416aee137af170323b414
-
SHA1
0de97d2e23dc34be2cfa2e340facc8cb31bb54c6
-
SHA256
aa4e68d29ae0ce8a6d9e52b21c304c68f295553d165ab32a739cef66b22a85b9
-
SHA512
c698a0e6d4297fb17cc1ca60975d20cf88fa65c2930ed0e9fbe81e81c9fbcc735e84ded68b89925b763e9d24ba56223cdbd0b679462f04df377dfaf9b3a52c2b
-
SSDEEP
1536:tf2igRoz3TZEv8q+9Lqwe14h8vR6A3sJ8N55HkjMcpz1HuHQ7mCCKS6J8N:tf2AZEU/8ww4hyt87TyQ7mCGs8N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 023c33ab415416aee137af170323b414_JaffaCakes118
Files
-
023c33ab415416aee137af170323b414_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
erdqnyd Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdw Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pm4hmsn Size: 622B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE