Static task
static1
Behavioral task
behavioral1
Sample
a43dcaec4ff3e9240d00221d1af5cf44_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a43dcaec4ff3e9240d00221d1af5cf44_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a43dcaec4ff3e9240d00221d1af5cf44_JaffaCakes118
-
Size
859KB
-
MD5
a43dcaec4ff3e9240d00221d1af5cf44
-
SHA1
c30db4fcb05c125d2dc4dd38668cfb5dbd1948fe
-
SHA256
43fb1f5bd69b7dbbdc22c1ec907e9ebca7408a4c7ff3d079d3d977b421fd9a9f
-
SHA512
a8de8a683b9fcb38583e4c376ca386bb35c03e398c5d5ba5590fa9d5017f4de31783ea7835c6299f4631a6f46a25bbcfc9a1412a1216df1db89aee6bbfe7aeea
-
SSDEEP
24576:LJJJsDDDPbbbF5V5V5Eccc5bbbzYY/NNl999Shhh:Hccc5bbbrNN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a43dcaec4ff3e9240d00221d1af5cf44_JaffaCakes118
Files
-
a43dcaec4ff3e9240d00221d1af5cf44_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
MZ� Size: 184B - Virtual size: 4B
Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
is progr Size: 1622.1MB - Virtual size: 1586.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE