Static task
static1
Behavioral task
behavioral1
Sample
230e0b6be255e94aab730f368bd9e8a4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
230e0b6be255e94aab730f368bd9e8a4_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
230e0b6be255e94aab730f368bd9e8a4_JaffaCakes118
-
Size
52KB
-
MD5
230e0b6be255e94aab730f368bd9e8a4
-
SHA1
4837e5138c8201a92cfa1881af3bea71462b972b
-
SHA256
a3ec226689859dbe08cca8bf6174a06c04ca5c8565eeb8150f0d1f6cea9ee362
-
SHA512
0ef169f0ca3c3f7ef2dd22bdf074b0b101ce8d26bd794865fcbf3ce08c92eb1afb01c6094884e19d23d01e15a87e50c3d9c0e580658a7dcb4d4ffeee4975d1c4
-
SSDEEP
1536:gwNCcIlDEweXqyumHIa1fTRWwd/x5jzNvnYp:gwEploweDuyIa1rRTV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 230e0b6be255e94aab730f368bd9e8a4_JaffaCakes118
Files
-
230e0b6be255e94aab730f368bd9e8a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
8ec699a173707e52bb32e2ca3ee7e9e7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlImageNtHeader
RtlImageDirectoryEntryToData
memset
_chkstk
kernel32
LoadLibraryA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE