Static task
static1
Behavioral task
behavioral1
Sample
23cf8e655ba958d34c8b13a5fe7c2e12_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23cf8e655ba958d34c8b13a5fe7c2e12_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
23cf8e655ba958d34c8b13a5fe7c2e12_JaffaCakes118
-
Size
51KB
-
MD5
23cf8e655ba958d34c8b13a5fe7c2e12
-
SHA1
7a8a8cbdc29c6b1b24b5534a8a91a2a92f145935
-
SHA256
6850146bc28dd55697af17c1d9e6848df2360625bbe5f3fe43bc19af92adea4c
-
SHA512
d081ea93fbb691a362e27e9f286cb292a91e96e563cb16b64d45fb7ee2ea7daec4bdbb80eaedd4b031fb5c45b239111acef572423b6acb764f1953231136f9f6
-
SSDEEP
768:oE2qscTwYb/xLz10mxdbbzVC4zf8QTemZr127zfNYR6hTYbdesjENVfY8:Z2q/cYpp0mx9VCAzTeXNS6hTYbhYNB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23cf8e655ba958d34c8b13a5fe7c2e12_JaffaCakes118
Files
-
23cf8e655ba958d34c8b13a5fe7c2e12_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.RIF1 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF2 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE