Static task
static1
Behavioral task
behavioral1
Sample
43f743e8f7648ddb2cb1f9e51ac6bf4d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
43f743e8f7648ddb2cb1f9e51ac6bf4d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
43f743e8f7648ddb2cb1f9e51ac6bf4d_JaffaCakes118
-
Size
388KB
-
MD5
43f743e8f7648ddb2cb1f9e51ac6bf4d
-
SHA1
80de497702a00fb7740341316548960f3fa18489
-
SHA256
c15d0d257ef227d675eb3297431a1955e77b9a9af7128263110a9b7955a83772
-
SHA512
aa25412b18b0c4c189f20513f79168709bf0fd3d0093be58d910092437e99264f07ec2e02f7143e42e7a1571d53bd9181e7bdb24843c03de47c35ad79970586a
-
SSDEEP
12288:naJGX38lhvrLsfh9uVyGRRi7+hX41ksN92E8n:aJGArLsLieB92
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43f743e8f7648ddb2cb1f9e51ac6bf4d_JaffaCakes118
Files
-
43f743e8f7648ddb2cb1f9e51ac6bf4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: 25KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 292KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE