Static task
static1
Behavioral task
behavioral1
Sample
23ba76506e50f013c702b30eba5489a7_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23ba76506e50f013c702b30eba5489a7_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
23ba76506e50f013c702b30eba5489a7_JaffaCakes118
-
Size
82KB
-
MD5
23ba76506e50f013c702b30eba5489a7
-
SHA1
67bb479cba5073967cc9a28d1eb807babd220260
-
SHA256
9aded2247704bca825725bc7fcf24cbb51cdf64c5a9a54c58877430afc5c4abd
-
SHA512
66b5136d9f3ce9bd734259e64f58950adf6b21c2e699d57739fa404118b9bcf909ca45a920f7253fbb8e041a8c4ad512b6ef4c7ae1729dce981bc63f87f477ef
-
SSDEEP
1536:OlQjyFSD/gCGwKJG1g4wq/VMqPc8qtTFhnL1zXa71qh9bpdr:hjyFSD/gCGw2Ovwqi8IpL1Da7UH/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23ba76506e50f013c702b30eba5489a7_JaffaCakes118
Files
-
23ba76506e50f013c702b30eba5489a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
��:~� Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE