Static task
static1
Behavioral task
behavioral1
Sample
043eb662a4396c48d0dbbdea103271e3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
043eb662a4396c48d0dbbdea103271e3_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
043eb662a4396c48d0dbbdea103271e3_JaffaCakes118
-
Size
1005KB
-
MD5
043eb662a4396c48d0dbbdea103271e3
-
SHA1
d5f4a7b80b11178ba10cfb9aa2d8cf88f6a49673
-
SHA256
9b86a987bc931a51e370b9773ca436255890bdf07c8d078a9a5fc00f51cbba6e
-
SHA512
a23ca088d396ba8653330f0453039452568e16c1a79b37f5f8d4b2cbf680726d75f8ab2492c6762f1c15fcdb0c053027240a1454cf2f6324aabae51beefca636
-
SSDEEP
24576:T4c+R/nlZUE7pO2ec4bAqUBXgHzkS1f4QK7psFIRy:T4tNlOMQ1VAqOQTvR47psFV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 043eb662a4396c48d0dbbdea103271e3_JaffaCakes118
Files
-
043eb662a4396c48d0dbbdea103271e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 5KB - Virtual size: 1004KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.const Size: 926KB - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ