Static task
static1
Behavioral task
behavioral1
Sample
d23b8672b069048793fe45f5358d4aa1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d23b8672b069048793fe45f5358d4aa1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d23b8672b069048793fe45f5358d4aa1_JaffaCakes118
-
Size
1.5MB
-
MD5
d23b8672b069048793fe45f5358d4aa1
-
SHA1
e034eb843d6b578134fcf3535a4db7e31a75cb06
-
SHA256
995f69fcb45bffd54cb80bb484ec43aa21027b9c713d994d1daea173a5c1deb1
-
SHA512
621bf4b7089912f9a1ab80584decfbca268ac5efcb4f07e413268f16155e94bc0bc4f4ac384cdaff0bc8ca269faf2cb8f033be9e9854b45d56a7d92eb1692b35
-
SSDEEP
24576:iMjqzBk++sLuOLmEaXACnmCR0xBJqN6Qbs2oBvRu96oJMHqiKdKo:DjqzBB+6F/7Cy/JI6QCuxMHZKdr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d23b8672b069048793fe45f5358d4aa1_JaffaCakes118
Files
-
d23b8672b069048793fe45f5358d4aa1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
svchost Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE