Static task
static1
Behavioral task
behavioral1
Sample
23b7e09b43cc6ef96ffcd2fba0a4ce0d_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
23b7e09b43cc6ef96ffcd2fba0a4ce0d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
23b7e09b43cc6ef96ffcd2fba0a4ce0d_JaffaCakes118
-
Size
46KB
-
MD5
23b7e09b43cc6ef96ffcd2fba0a4ce0d
-
SHA1
1160510cf0f74394f271a3d6e6bf64dd399c3545
-
SHA256
54f9570a18ec70b555e79189404d83c9cc463627d7502e46a47d56a5808a4a18
-
SHA512
903635b3d12203dcea02cf9dad7a144547b38b45e524f1e5741343e6cbef352459318e41b75cee1220a4646d14e357a141c7fac9a3e58b1161ea45dac9b8a2bd
-
SSDEEP
768:u75Uae2rWvn66Liupk7UBzALeC1HBm6zapV7ZbnVGmALscy7d6hAehAtNS:anb6SgHpkoXqBm6qZrQm+Ty7d6/AC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23b7e09b43cc6ef96ffcd2fba0a4ce0d_JaffaCakes118
Files
-
23b7e09b43cc6ef96ffcd2fba0a4ce0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wn.hwr1e Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ro2nq5wu Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
10toby49 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
efqhd1x. Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
z9tqg3fk Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
w1hl83s8 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ