Static task
static1
Behavioral task
behavioral1
Sample
23b261327879825156e7d4373cbc8a9a_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
23b261327879825156e7d4373cbc8a9a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
23b261327879825156e7d4373cbc8a9a_JaffaCakes118
-
Size
256KB
-
MD5
23b261327879825156e7d4373cbc8a9a
-
SHA1
c9160b34bd7efcb281432d519a8bd6051e46db41
-
SHA256
98f511ecb5a38f67eeb448e897c0abce63a789ecf62a286f0da9eb9b6e7ead41
-
SHA512
d9d7e2b8f9c27b74a576e947772bc6e0eb01e0d15381e3bc28eb8e957def4c1f721b7d89214d728b39362bd13d9e9e025c1ac74cd5aa5227ae334f7c467190ba
-
SSDEEP
6144:dDikkgXdVhyDFHb3AUg4CccCKQuvWBLa30lA1+EraacUBOBL:PkgXDhyx73/CcjIvW4ElA/NBS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23b261327879825156e7d4373cbc8a9a_JaffaCakes118
Files
-
23b261327879825156e7d4373cbc8a9a_JaffaCakes118.exe windows:5 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9..4mk00 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dljzmdyo Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4qu113ub Size: - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
d83c9aa5 Size: 250KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6vjdbm37 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ