Static task
static1
Behavioral task
behavioral1
Sample
43b43917237dfef6dd544417f19bb839_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
43b43917237dfef6dd544417f19bb839_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
43b43917237dfef6dd544417f19bb839_JaffaCakes118
-
Size
322KB
-
MD5
43b43917237dfef6dd544417f19bb839
-
SHA1
0c374c122bd41122ec351b80bbcd9e36320b6be1
-
SHA256
3f2b5c083182fe08bbb14852e852f3311170f57e414474a1c14974e9b8c262a7
-
SHA512
d39421779b29b6d523e7fbe3ca0511136f74513f162a34154b3f138aa1993817ca27ddf22790f245b2fa60900079d20246317ae5ace1c6298e0975a12adbdd27
-
SSDEEP
6144:M9t9Q08NfPWJng8taIFnvyPQub+XD1F0hBcx3T:6rvKExhyPR25F0hex3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43b43917237dfef6dd544417f19bb839_JaffaCakes118
Files
-
43b43917237dfef6dd544417f19bb839_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 253KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ