Static task
static1
Behavioral task
behavioral1
Sample
details.txt .exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
details.txt .exe
Resource
win10v2004-20240611-en
General
-
Target
20d21489b3d521cafbd8b144f50305c3_JaffaCakes118
-
Size
23KB
-
MD5
20d21489b3d521cafbd8b144f50305c3
-
SHA1
b6383db81d9ccee1e2c7115d9aa5b8c2465f5e01
-
SHA256
4310e745150b9e1b51f5829b72e0051811f5cffe54fb7109af0d05523291e5bc
-
SHA512
c2f66d870d8672b3b02eb6fbb9809c91987f27db5530e578622b7216fc4634bb0f4ff0ccee870a87cf748da27877e521f8282b493ec34b10e3c6a30819054124
-
SSDEEP
384:BNJMoxV1AZri/qg+wt4flJ9g6oq1NtFuqrCV4Z5aKjOQbaz09foi2NFXQ4Ywl72h:XWozIdit4r99vNtjU4aMd9wi2vXQ5mSh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/details.txt .pif
Files
-
20d21489b3d521cafbd8b144f50305c3_JaffaCakes118.zip
-
details.txt .pif.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
����t Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����a Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE