Static task
static1
Behavioral task
behavioral1
Sample
43b9db6d62445af4363f0cf88a6d1566_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43b9db6d62445af4363f0cf88a6d1566_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43b9db6d62445af4363f0cf88a6d1566_JaffaCakes118
-
Size
283KB
-
MD5
43b9db6d62445af4363f0cf88a6d1566
-
SHA1
cf2828a28c1a29879b6e8821a087e7817a6424eb
-
SHA256
c5db1f84f8c311305e0ba41656afd43d552b12f2d0df3c60681336181eade505
-
SHA512
b9d0e847a54c7ac82e806aa29d397f07e7c61e9f25126cd3c4988ad24366c89920de83e31ee6ff197fa0b09c912dc86b8a8c205a7e64cf8162423caeb08bce79
-
SSDEEP
6144:FBfzFFh0TXsJXUnuQVtQaZAxLSk4i0n6Zh60SOdvKtUoJ:FJz7PUnuQ9ZAx2bisS6AGV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43b9db6d62445af4363f0cf88a6d1566_JaffaCakes118
Files
-
43b9db6d62445af4363f0cf88a6d1566_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 616KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 278KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE