Static task
static1
Behavioral task
behavioral1
Sample
43e69ad9547eece25eb7ca5e51adb415_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
43e69ad9547eece25eb7ca5e51adb415_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43e69ad9547eece25eb7ca5e51adb415_JaffaCakes118
-
Size
787KB
-
MD5
43e69ad9547eece25eb7ca5e51adb415
-
SHA1
ec4c3b8732779d11f2120e0416aec5594f63c1c4
-
SHA256
76938f7ac007a44c4b315d97c6839076da1cc504ea9cfe6891634d808e82cb1c
-
SHA512
5c18a34d0463b7bd075d130cbd273234386d0afd18843bb071383f5a2893a1cad2ad1e68cfc33ca42fcdcf161e98e30fece25b586e56204d4dfd459357d022fe
-
SSDEEP
12288:P86OVc41v0bOQ0XE/KzdINjdc1PcvVvWSWb0VHIEGpzK6FSkFvzAeF0CxYgdb5:01cWQ6dINjd2KVv1e5pzvsenYE5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43e69ad9547eece25eb7ca5e51adb415_JaffaCakes118
Files
-
43e69ad9547eece25eb7ca5e51adb415_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 285KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 342KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE