Static task
static1
Behavioral task
behavioral1
Sample
1b23b8235cdab930503062581a5d0d3d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b23b8235cdab930503062581a5d0d3d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1b23b8235cdab930503062581a5d0d3d_JaffaCakes118
-
Size
15.4MB
-
MD5
1b23b8235cdab930503062581a5d0d3d
-
SHA1
44c6344536ff505288cd74add18c00ebc0794e85
-
SHA256
fcd3fcfe06da84444c3b6486016d44daa12a89dae7b72d0d1201d91c206b7c8f
-
SHA512
ae8de2d80ad2de5da81553dc6edc42ffb875bfd3ce39aa117826e9f4c4d6a75516a589a78b29a98e2fde15698881e6dbe33c06fead25d6a51fc0c9b4398759c6
-
SSDEEP
98304:tz2kO2kp2kO2kg2kO2kp2kO2kg2kO2kp2kO2kg2kO2kp2kO2kE2kO2kp2kO2kg2U:q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b23b8235cdab930503062581a5d0d3d_JaffaCakes118
Files
-
1b23b8235cdab930503062581a5d0d3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ecode Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.MaskPE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MaskPE Size: 1024B - Virtual size: 952B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MaskPE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
mk Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ki Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
np Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qs Size: 128B - Virtual size: 128B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
po Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE