Static task
static1
Behavioral task
behavioral1
Sample
43ce39b5d5cff55d00e295e67476885b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43ce39b5d5cff55d00e295e67476885b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43ce39b5d5cff55d00e295e67476885b_JaffaCakes118
-
Size
141KB
-
MD5
43ce39b5d5cff55d00e295e67476885b
-
SHA1
e0c701e24541729f41073270eb90c512b6ad52c5
-
SHA256
f00acf080cf38e9fd5ab9e1b327ab591bec4106b356ea83755bc9ec549e63f1e
-
SHA512
451a796b2f805c29c33f06c6e3463e483526200a243634e4dda07abd7512cc7a7febdf050fc8acecdefef1ab9c204462f0f5b6884e965cf56ad624e9517d65f6
-
SSDEEP
1536:yLA+KYW2d5zvB1XyYTQPhZttyH6i+UrjJZXnOC2ULjRG2viSWkmiiSmkFnbB:yNKYRLKgQ/NUfJZOCVRGxhkbB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43ce39b5d5cff55d00e295e67476885b_JaffaCakes118
Files
-
43ce39b5d5cff55d00e295e67476885b_JaffaCakes118.exe windows:4 windows x86 arch:x86
3bfa0fa66ecfc73b41c17f762a6c7b98
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
ord696
Sections
.text Size: 75KB - Virtual size: 596KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE