Static task
static1
Behavioral task
behavioral1
Sample
23e92d6e0d97c98e09efd10302a15d6d_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
23e92d6e0d97c98e09efd10302a15d6d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
23e92d6e0d97c98e09efd10302a15d6d_JaffaCakes118
-
Size
996KB
-
MD5
23e92d6e0d97c98e09efd10302a15d6d
-
SHA1
97e58320e96655290b9c7775e1ab0c9d5b9f09d1
-
SHA256
49adb89a735d51f07132904578f3a5d9befb902bcc019363b5ab28a02f26b9b1
-
SHA512
afea6d78c76cd084b27dd133042f4eaecbb38ef03bcffb2a462e17679492fdb04e9e3cfbe936f87369e0ce095cac0586979ed38d6b83b83fdd4abf3e293480a5
-
SSDEEP
12288:3ZiumPJYngF33lf2nKfgHlNhrnclAYC/xsKA8ijRxDYWzNoDZhon3fTMtgZEJeQ:3QuAOnClf2nHlrb7HdEIAMqn39EZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23e92d6e0d97c98e09efd10302a15d6d_JaffaCakes118
Files
-
23e92d6e0d97c98e09efd10302a15d6d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 3.6MB - Virtual size: 19.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE