Static task
static1
Behavioral task
behavioral1
Sample
043c4cce53edf0dbcc0addc5f430a69e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
043c4cce53edf0dbcc0addc5f430a69e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
043c4cce53edf0dbcc0addc5f430a69e_JaffaCakes118
-
Size
23KB
-
MD5
043c4cce53edf0dbcc0addc5f430a69e
-
SHA1
c963c328e8b90d95c1be2bed2ea25f279cff7b5c
-
SHA256
c6b9e29efb8ad7c8ece45d49046e50e4968d8a8c937db8c212229edca718d55a
-
SHA512
b69c03e167c0e992e7ca19a077027682049e787b496fadaedeb430671e28904e2dcacc99d84aef955b3b54ba2d5721e5dd054bdd712ec96403253803d0025e2d
-
SSDEEP
384:Piv9NM67LuJP7xaQ0xh5K+BrIyucYetD++xh1iyzknYjc5SamYhNcngkP:P0fMrL0xhNBBYetDxhY1Yjcw3vngU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 043c4cce53edf0dbcc0addc5f430a69e_JaffaCakes118
Files
-
043c4cce53edf0dbcc0addc5f430a69e_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 18KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE