Static task
static1
Behavioral task
behavioral1
Sample
43b09beb9938929aea774a6f45aa8f23_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43b09beb9938929aea774a6f45aa8f23_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43b09beb9938929aea774a6f45aa8f23_JaffaCakes118
-
Size
260KB
-
MD5
43b09beb9938929aea774a6f45aa8f23
-
SHA1
6c65d3c45184103ed18ffa664d9c62d279213130
-
SHA256
a80b0c46ae7020a00d702818cdd0dbe1e32935304991b74e5e1a90660964f48e
-
SHA512
15b30e0e5e154567ef0458bb1efd44e51dcb3c33d14a527097bf334de6be50c92fe194c56e8f8eb7741ca09a5d70a794384693ef4d01d7558972609aeb9be4f5
-
SSDEEP
6144:rjiYkEa+/wGeEnO0kruHa9yfXgdrpE9Xc4aGhYCoPc96Hx6lmFUn:rWHEsGeEnO0hoyfX0W9X7aGhY5Pc9OCR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43b09beb9938929aea774a6f45aa8f23_JaffaCakes118
Files
-
43b09beb9938929aea774a6f45aa8f23_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mackt Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE