Static task
static1
Behavioral task
behavioral1
Sample
23091ab008c20e1c6178ae966b4bcdfb_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
23091ab008c20e1c6178ae966b4bcdfb_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
23091ab008c20e1c6178ae966b4bcdfb_JaffaCakes118
-
Size
15KB
-
MD5
23091ab008c20e1c6178ae966b4bcdfb
-
SHA1
b616d5aed459f4dad0a9f07cd14eb61d44a5fe82
-
SHA256
8e0f89f357c8a4bc0dfc81b4494aba201d74779e3d8a7a822a1032cce6a7a535
-
SHA512
9c6eebd990771cc7becef0cdf75208baf78cb81cf269156bbfceb3cb08696f71a9bb56bb664d07b4a4e10ac770b6598d46f645d9a99636fca551d974321a7d66
-
SSDEEP
384:BePujdca0wYAFB/OHjfLHz16efgD7qfPz:Beod2wYAFBmDbzrYD7IL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23091ab008c20e1c6178ae966b4bcdfb_JaffaCakes118
Files
-
23091ab008c20e1c6178ae966b4bcdfb_JaffaCakes118.exe windows:4 windows x86 arch:x86
f35da0feaeb1ea3121dbe4b43d43d5fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32.dll.
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE