Static task
static1
Behavioral task
behavioral1
Sample
23c3097a7e029b6b28a6a8c7726f6d94_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
23c3097a7e029b6b28a6a8c7726f6d94_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
23c3097a7e029b6b28a6a8c7726f6d94_JaffaCakes118
-
Size
1.8MB
-
MD5
23c3097a7e029b6b28a6a8c7726f6d94
-
SHA1
90fcc24e46ce02adfb988029fb474c9d765b2e43
-
SHA256
ddafdf1ef5f3266e8f152dcf9032237c4c295d4735592c01f702ceda44e54974
-
SHA512
8af25eded43d02c2c985bedf6778e234be9ab5e6d34a02168fed56fcb12402b1014e4b33925f9a045d1a173a7ba8f4d5d343cd07a2810a191c65c8e2d1d468bf
-
SSDEEP
24576:QB9mBs2MddNcj93l4JfSGUy7odBMNGFitAV0fBLPP0BdpCfG4ZWOXEDWTWV8fMdb:QB94sRdkVmNdzGFBV01H6dpCuxbdb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23c3097a7e029b6b28a6a8c7726f6d94_JaffaCakes118
Files
-
23c3097a7e029b6b28a6a8c7726f6d94_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
system Size: 1.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE