Static task
static1
Behavioral task
behavioral1
Sample
23be724dc0edcf4a9e4f2c5461700ffe_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23be724dc0edcf4a9e4f2c5461700ffe_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
23be724dc0edcf4a9e4f2c5461700ffe_JaffaCakes118
-
Size
43KB
-
MD5
23be724dc0edcf4a9e4f2c5461700ffe
-
SHA1
4338972d098f9b366d1aa9c89083d92cfd8ea139
-
SHA256
30531a24731e57d0ff09f24ac10efa2956adf921d0db5bc513a97e07f0549143
-
SHA512
3f00151946e5854911bb96cea4ff07a97523f8ca14e94b403ee840cb943159e2ed98ce15f9d7926fc0bbf7fa8f027b948e6d5bde223f1a5c428d5d429b83f22f
-
SSDEEP
768:M/O3cL9rCptIOAwEq8ybKpLJdP8kQ8xkZuUvkcnJteNIOBsui+RkBPoU:MGsLgptnAwEqRezjB+Zu6nJtKbB7jRkB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23be724dc0edcf4a9e4f2c5461700ffe_JaffaCakes118
Files
-
23be724dc0edcf4a9e4f2c5461700ffe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
956ptd0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
956ptd1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
956ptd2 Size: 165B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE