Static task
static1
Behavioral task
behavioral1
Sample
a43e05344ebf33cdd15bf78700302898_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a43e05344ebf33cdd15bf78700302898_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a43e05344ebf33cdd15bf78700302898_JaffaCakes118
-
Size
5.4MB
-
MD5
a43e05344ebf33cdd15bf78700302898
-
SHA1
5ff01a6e93194ed8dc12c71d83caeab06b18a695
-
SHA256
f112b7767c836b3d85d62f3f930e49cc7fc3176febe87982dc572df16cff4d67
-
SHA512
8149d38e09107bf14a17ca6761c9738e4cf1d7a9ac24f2eea03b95e21a867e3f67988b293929d18960e72ee3b6c6ef66f256c3002368891d798144d3240b6e3b
-
SSDEEP
3072:gg6e9X7DKnkUlNGGAeZxGdpleBZDOxQQwcocN4W2bCAyTm79+AkmBi41ghJp3F:Z9X7DMnURe0eBAsfBuAyTK5F2hJp3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a43e05344ebf33cdd15bf78700302898_JaffaCakes118
Files
-
a43e05344ebf33cdd15bf78700302898_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ