Static task
static1
Behavioral task
behavioral1
Sample
43b64bbbf05ddebc639436370a39d26e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43b64bbbf05ddebc639436370a39d26e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43b64bbbf05ddebc639436370a39d26e_JaffaCakes118
-
Size
378KB
-
MD5
43b64bbbf05ddebc639436370a39d26e
-
SHA1
d7f6bbd6897b246badc0b148db071673141b47dc
-
SHA256
736e253945710bb4bcdf50bd009eaca8f6f56e19661ff99c38835b1de511cb59
-
SHA512
69eaa82a2f40c4c72fc90268c50dfbdee59a9237c046ce6d479de143429ea186446d42fbb8ce4762a3960253cd91bb918828ee5a9a3f27050e38bfb674183631
-
SSDEEP
6144:pnqphrgSbdqx+69K5XiRUD7Eofd5Jsa+4gYHokZmuLFn+df/pwxhqMqyAdmiDKq3:TSbdoYBuO7Eofd5Ws3c8Fncf0hqHmWKK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43b64bbbf05ddebc639436370a39d26e_JaffaCakes118
Files
-
43b64bbbf05ddebc639436370a39d26e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
?o'0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
?o'1 Size: 377KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
?o'2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE