Static task
static1
Behavioral task
behavioral1
Sample
23ff45668f7672e89fe0f82082192135_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23ff45668f7672e89fe0f82082192135_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
23ff45668f7672e89fe0f82082192135_JaffaCakes118
-
Size
102KB
-
MD5
23ff45668f7672e89fe0f82082192135
-
SHA1
96f303e4dee2208fbb16bdea55dd260089df39f8
-
SHA256
2ccee256c72b92e93e5b40d994fee377f644bc3047009d23633909d21cb2a3a2
-
SHA512
06436b8d68f3599d5c4316c11bbf40cc1448ccf85870ac8fbb7ba2f3725f27ccfb5d274d23e86e6434b191d0274319b93ae9c501889c4b3b532d691b1c434a54
-
SSDEEP
1536:zVzqxYXLqluDHlvtk2+qvcwKTytJxsZS8Los/B:zJq2XLqluDHXV+q3KGqZHLos/B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23ff45668f7672e89fe0f82082192135_JaffaCakes118
Files
-
23ff45668f7672e89fe0f82082192135_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RELOc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eDAta Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdATa Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.COde Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATa Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 418B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dAta Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ