Static task
static1
Behavioral task
behavioral1
Sample
43a92d3bdad9b2b06c1d66548cd8d29f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43a92d3bdad9b2b06c1d66548cd8d29f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43a92d3bdad9b2b06c1d66548cd8d29f_JaffaCakes118
-
Size
19KB
-
MD5
43a92d3bdad9b2b06c1d66548cd8d29f
-
SHA1
b209ea2878779532e0f60add431069677f5a54f3
-
SHA256
ee5e7253d59aa08181c1fe790dd84a73b3de4d9a0ff268ba06b798e7a360e9bb
-
SHA512
1637f06d7dd8e952ad1ee9826b09481cfc9a573c1c117dfe2314bbe7db08c306c1f83761b971a8294b1b58632488d731693a0d9a48d984e73f63b98cf9a16049
-
SSDEEP
384:kmSBDYX+Ex1GgDJw3wiAnQyrybfrtDdALIB9I0aNJawcudoD7U2w:kdgHlNwg596frtDdASMnbcuyD7U2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43a92d3bdad9b2b06c1d66548cd8d29f_JaffaCakes118
Files
-
43a92d3bdad9b2b06c1d66548cd8d29f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE