Static task
static1
Behavioral task
behavioral1
Sample
23e34776febea60b6bb185253386b5ce_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
23e34776febea60b6bb185253386b5ce_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
23e34776febea60b6bb185253386b5ce_JaffaCakes118
-
Size
3.1MB
-
MD5
23e34776febea60b6bb185253386b5ce
-
SHA1
03b4ffc33af5a9085575d24604b8f29f831b396e
-
SHA256
a66ccba9dbe374e1b36591d756c78430ddcfa260eb1f190185d86dde99b9a3a8
-
SHA512
4bb2a61d399b1a17db4f6a1a5a0b0823fe075b8131a6df3cfd2eb736ea037f10344846c84f86d14547cf3e997ad608c9fd3e66d178699337c3baf87313758005
-
SSDEEP
24576:/KRWRHoAykZ+H1q7cevf1p/9TAgFzbOz9lq23eu5ebocSjOhh9LIJ/TcyQUlpt2/:/KGCkmWjrFTtFzb/fQdWxkJ//3CnL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23e34776febea60b6bb185253386b5ce_JaffaCakes118
Files
-
23e34776febea60b6bb185253386b5ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 773KB - Virtual size: 773KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ