Static task
static1
Behavioral task
behavioral1
Sample
23e3520d7d971c15ef5e5932d8e54b81_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23e3520d7d971c15ef5e5932d8e54b81_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
23e3520d7d971c15ef5e5932d8e54b81_JaffaCakes118
-
Size
32KB
-
MD5
23e3520d7d971c15ef5e5932d8e54b81
-
SHA1
a92b8792047e059b3ccfc3b49c933fac69abd209
-
SHA256
145979e15c898f53b63bcc2ff44bc2048a4b2f46ad44f2f10b9f8f436f672244
-
SHA512
130a799df9314a6a6414c30f3b1bcc5deda122577e91d5ad061a70cdfc87d2f82fcf91ae2fb67957c1ffc72855d4dcaab7cc2cf5fe7bd66c714a74c0d9691f51
-
SSDEEP
384:0F7NTb7YKsntug32InDuDI8oE/TxUKtfObKPqniDKIBDxk:QNv74t/GMuDHJxU+A5SKIBDxk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23e3520d7d971c15ef5e5932d8e54b81_JaffaCakes118
Files
-
23e3520d7d971c15ef5e5932d8e54b81_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE