Static task
static1
Behavioral task
behavioral1
Sample
f43b76c9e8f0c6e64a8892d470c2d1cb_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f43b76c9e8f0c6e64a8892d470c2d1cb_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f43b76c9e8f0c6e64a8892d470c2d1cb_JaffaCakes118
-
Size
16KB
-
MD5
f43b76c9e8f0c6e64a8892d470c2d1cb
-
SHA1
95adecfdc33ac6a8817896f00f19c57769ae8af6
-
SHA256
5afd36b2c68a12e90732dcb8170d3d0e01944b1c0339338495cd464605015a31
-
SHA512
7e321968d1e40ca3591bd97bd4bcb2174663a314995aa14f7721c82cdad2c66a34ac20d97d5e75bfe5e2177e46ae0d579b82b007b7c053cc5df5286808155c74
-
SSDEEP
96:+vVJpBUZrTmqhEGynJUoUi2NQ5mT/SfFP6giJY31F3uQ:+v3pmF2ntRA/SfFy43uQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f43b76c9e8f0c6e64a8892d470c2d1cb_JaffaCakes118
Files
-
f43b76c9e8f0c6e64a8892d470c2d1cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE