Static task
static1
Behavioral task
behavioral1
Sample
43d42909fde464db58ee5cbb32d41804_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
43d42909fde464db58ee5cbb32d41804_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
43d42909fde464db58ee5cbb32d41804_JaffaCakes118
-
Size
167KB
-
MD5
43d42909fde464db58ee5cbb32d41804
-
SHA1
e438cd11410bd47e33cbbc3e7e938db9ea1f3cd9
-
SHA256
b34bef4fe39fa14f7acb426a3a88e951ba496e1717942afda717b85a11375967
-
SHA512
19ab021d8a1577d5e29dabf30544d0a7847fa857809bf635f6540dbad1439f24bc825f98302d619efc481d3fda3f1dd80706ccdb610335043d1e7f44c58cc25f
-
SSDEEP
3072:uGAVxaOkO1O6B/hEO3eUI7Q/NStRDg9Ubnwed9w+ddO0TBVrG:6NjOwpE3UBNSHoW7k+GKV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43d42909fde464db58ee5cbb32d41804_JaffaCakes118
Files
-
43d42909fde464db58ee5cbb32d41804_JaffaCakes118.exe windows:4 windows x86 arch:x86
5c1381bc48cff62d8b41723765aea6e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstVolumeA
TlsGetValue
GetPriorityClass
HeapCreate
EnumResourceTypesW
InitializeCriticalSection
GetStartupInfoA
TlsAlloc
TlsFree
GetFileType
user32
MessageBoxW
RegisterClassExW
CreateWindowExW
GetUpdateRgn
LoadCursorW
GetWindowInfo
GetDC
EndDialog
oleacc
LresultFromObject
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 604B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.apexi Size: 1024B - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ