Static task
static1
Behavioral task
behavioral1
Sample
43df97e47f11e68dc13b801a9ff29ed7_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
43df97e47f11e68dc13b801a9ff29ed7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
43df97e47f11e68dc13b801a9ff29ed7_JaffaCakes118
-
Size
196KB
-
MD5
43df97e47f11e68dc13b801a9ff29ed7
-
SHA1
710d5d5932c29e5d5dc74c324f07dd3aa37fee4b
-
SHA256
e3d896bbd99ebd49200152bfc4b8e79a9acf9e3860894a3e4041cd78ce8af915
-
SHA512
8acd0f45bc48590685d8078d65eb291e6bddc9e1acb6209d1b7eab4f70275c89e35266795c63abd076c8d67eb477be09684406e0d2548408a8e613265364144c
-
SSDEEP
6144:WbcWG/obSVlbndMcLJ0S1p5ZkLDkzP8mwFw3WS:WgWGQ6bdthp5EkzPFGS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43df97e47f11e68dc13b801a9ff29ed7_JaffaCakes118
Files
-
43df97e47f11e68dc13b801a9ff29ed7_JaffaCakes118.exe windows:4 windows x86 arch:x86
afb1ed92102b757e36567a4fe18527cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
Sections
Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 95KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 35KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.txt Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE