Static task
static1
Behavioral task
behavioral1
Sample
43a4aa1c27d11249dabd8fe10c532133_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
43a4aa1c27d11249dabd8fe10c532133_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
43a4aa1c27d11249dabd8fe10c532133_JaffaCakes118
-
Size
214KB
-
MD5
43a4aa1c27d11249dabd8fe10c532133
-
SHA1
4646c51fffcfccac37e805b8d2938abb2a496c8d
-
SHA256
e86e952da4b56cd728c34e9029156de8c49cc98ca9dbbef0b4bb1896b8fe46cb
-
SHA512
e7170713b33fda0f5c3c05981c9dd1c7ea646eac4ea8adbdf07971201946384f860ec9c236cdcbf0b3f1a2599002c3fda464dec2a7d2bd456bfa1bf1116f835a
-
SSDEEP
6144:8j5nb/b4xSAJODOdRG6nEJGoN0J8+/fLBt/Nmucj:iqkDOzxE0oN0J8+3LBBw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43a4aa1c27d11249dabd8fe10c532133_JaffaCakes118
Files
-
43a4aa1c27d11249dabd8fe10c532133_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE