Static task
static1
Behavioral task
behavioral1
Sample
43d6d7729c495aa30a652bc28578ab63_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43d6d7729c495aa30a652bc28578ab63_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43d6d7729c495aa30a652bc28578ab63_JaffaCakes118
-
Size
188KB
-
MD5
43d6d7729c495aa30a652bc28578ab63
-
SHA1
ef8353eaee327101c3612d45ab14bbd6a80ff247
-
SHA256
73f55b2f703cdb1549f291a3160f60db39b7c51dee18a8289a9d2cda4c48a07f
-
SHA512
1744f47c23c9870a6a55dc7b1149281f1035c2112981afed7cb3935bdb4e5fc3d575f0bb77cc2a7719e673bee730b3b39a4f416d4cad6286b6490abb36183a55
-
SSDEEP
3072:MMTN5x6Jg2EXHuJUImcvwyhqYx4Qb6OVNMvyYUsyY0HeMMj3WY/mfHZbuuhbJLwN:MMTN5x6sWmm0e4Qb6iNMvyYengNmF+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43d6d7729c495aa30a652bc28578ab63_JaffaCakes118
Files
-
43d6d7729c495aa30a652bc28578ab63_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 181KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE