Static task
static1
Behavioral task
behavioral1
Sample
d43a744bbd7d8f1c14b525b29fc6dce0_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d43a744bbd7d8f1c14b525b29fc6dce0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d43a744bbd7d8f1c14b525b29fc6dce0_JaffaCakes118
-
Size
59KB
-
MD5
d43a744bbd7d8f1c14b525b29fc6dce0
-
SHA1
b601d4fa5aebbfce45bed98d2d3d369453f2b4ba
-
SHA256
dd41cd71fc3c57f4c09868b011c36f89a71367a7052449b59cbe11602721b47b
-
SHA512
6bb39758fb16f1cfe13a0c16e88b361a59fb1fe9b72708c566f2a9e7d644aa1d114250c73561bff2af588a65e9d79cf8b390df7118e6a62d73aa1c4cb1e3c503
-
SSDEEP
1536:5BEcIegKA8Ce80bM69Q9NYJLNvxzcuO3v2TbEF+OP:5mcIegRe8cZ9Q9i9jIuWvDF+O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d43a744bbd7d8f1c14b525b29fc6dce0_JaffaCakes118
Files
-
d43a744bbd7d8f1c14b525b29fc6dce0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
PESHiELD Size: 31KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PESHiELD Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PESHiELD Size: 13KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PESHiELD Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PESHiELD Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ANAKIN2K Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE