Static task
static1
Behavioral task
behavioral1
Sample
43415ce908eac4c7b530ca71b3155b92_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43415ce908eac4c7b530ca71b3155b92_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
43415ce908eac4c7b530ca71b3155b92_JaffaCakes118
-
Size
201KB
-
MD5
43415ce908eac4c7b530ca71b3155b92
-
SHA1
6f8b73ca4b71cdcadc4d9b93216ac64b1f5d0882
-
SHA256
d3a867184539d5d17c4a98b645d2995c31d8391e1e8e91e15e1118444f80cb08
-
SHA512
f76641c4345ddf5723cc1decee00a3c872ba3d0a4a1e8ad1ea21a67e0921de7d9519d82f74999945ec3b85782c8d10115dc5efef1f1a4953f3e21ec9f582dc21
-
SSDEEP
3072:AydIauqkmMrwTETSpF+wiwrjnI2JRWT3NSMA9Xl96D7tRvwKadhWLJgZfYQu:uau/RGETSpF+6rjI2RWZnyqv2Zw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43415ce908eac4c7b530ca71b3155b92_JaffaCakes118
Files
-
43415ce908eac4c7b530ca71b3155b92_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 161KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE