Static task
static1
Behavioral task
behavioral1
Sample
23f0a59bb6651c0e3c5a96f60cb98f3d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23f0a59bb6651c0e3c5a96f60cb98f3d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
23f0a59bb6651c0e3c5a96f60cb98f3d_JaffaCakes118
-
Size
29KB
-
MD5
23f0a59bb6651c0e3c5a96f60cb98f3d
-
SHA1
aab6e5b1dfc192a3e5e2fe7e9c16ca331f370b69
-
SHA256
b15d0dbceb3b1fd4290198466982342b4435ca0dff77f980c84c30f74d5ef67b
-
SHA512
281b2a8e2e22c23bfee3dded593ad2dc17064030ec7f52ed3ef1f1f3f1f3268e61526917da94eacc421879ce64bad062b22a9f0730cf77abe95d389cb8df2c50
-
SSDEEP
192:qlezkOztX3HI50lAhPRnTrnk4gfr6fALqRgTIuP/wTy1c2ZpL+4yiWHoWN9sa5CO:fzkOzQNtrn+zeIIu3F7+iWXN9h5XL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23f0a59bb6651c0e3c5a96f60cb98f3d_JaffaCakes118
Files
-
23f0a59bb6651c0e3c5a96f60cb98f3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
extra Size: 4KB - Virtual size: 4KB