Static task
static1
Behavioral task
behavioral1
Sample
23fdee94f61c2d446820927a35cdd9bd_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
23fdee94f61c2d446820927a35cdd9bd_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
23fdee94f61c2d446820927a35cdd9bd_JaffaCakes118
-
Size
21KB
-
MD5
23fdee94f61c2d446820927a35cdd9bd
-
SHA1
3f3c03644f9671ae54320db6ce1ae6cd3dad273b
-
SHA256
22d88ad1ecb558f6c9024319c041e128af51e67de13e7e4768e3e6ff96578ac3
-
SHA512
45d0b45c03f84462ba06646423c5ff33e4f90044011a28ce82b1f0c4daee635606f3792b17d7f3b22062400b93e3fab6f05a532cf57bc553b90775757b9204ad
-
SSDEEP
384:j0qgddr8r/kUuEfNxzaN2RD/+VzHPJgOv/J6zWj39WgBNOQFXxL0v:gnLr8rsUuIxzaN2p/+VrPvL9jZi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23fdee94f61c2d446820927a35cdd9bd_JaffaCakes118
Files
-
23fdee94f61c2d446820927a35cdd9bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 15KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE