Static task
static1
Behavioral task
behavioral1
Sample
43ebdc6ff68cc59c6fa69bf304208fed_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43ebdc6ff68cc59c6fa69bf304208fed_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43ebdc6ff68cc59c6fa69bf304208fed_JaffaCakes118
-
Size
248KB
-
MD5
43ebdc6ff68cc59c6fa69bf304208fed
-
SHA1
b173c87d7a8e1c591325e0a9272055eb4a32d180
-
SHA256
c2f0dfb35863507c9d24d61b9bec1f38e087c0462e1549b2429cf3bf23165d62
-
SHA512
7eea27b89c623e1ababa35f98395b71cef377761e46bfd5b6daac07f1e8407030e17e855d23641cf74fa071bc04551b8eb033a7a0e4d25e918c73ab591eacb82
-
SSDEEP
3072:RNJzO8U42B9tFYan1qq2fPl+kzv3EnJw28qQZqnygdRCG1dgBKp:E7DB9v11qXfN+AIOD/mLUB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43ebdc6ff68cc59c6fa69bf304208fed_JaffaCakes118
Files
-
43ebdc6ff68cc59c6fa69bf304208fed_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 236KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ