Static task
static1
Behavioral task
behavioral1
Sample
43944480345d1f125281c20d9514c592_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43944480345d1f125281c20d9514c592_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43944480345d1f125281c20d9514c592_JaffaCakes118
-
Size
44KB
-
MD5
43944480345d1f125281c20d9514c592
-
SHA1
27bf2d66efcabe8cc26850ee152e1d6ae07dc548
-
SHA256
9325488876f833152c78e6c356d6209f6a01e239086df74a571d8ede0ecda259
-
SHA512
6d4ab089c02a93b729f3db1739ebde1630844ae5994d3103d35136a03161247d86a4a3e4fde9311f0fe403afada6c5c3e417f2f5e1f65df9cdba3569e015a17e
-
SSDEEP
768:wrrMeun8ptnqcMKsUYp06z0R9zIKsvHLtljzP1v8BQ00eun:wrFYy6oRVIKsvrtljzP1vkQ0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43944480345d1f125281c20d9514c592_JaffaCakes118
Files
-
43944480345d1f125281c20d9514c592_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ