Static task
static1
Behavioral task
behavioral1
Sample
042c98f19428ec8a191794325206de3b_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
042c98f19428ec8a191794325206de3b_JaffaCakes118
-
Size
139KB
-
MD5
042c98f19428ec8a191794325206de3b
-
SHA1
1081642f55054153385e4edae01fabdcadc62911
-
SHA256
533efb70d89d37d6bfd475fb63dc7f83d5918639d2f634c426802d805ece5cde
-
SHA512
c064c873572bb26baf6e1a13cd4e69265a22b8ea8208b7aae0aaa6564b744005d87e5594b69eb33702c1bbf78757cfbb7cf5f5affe5bcc17142cc0ed7291c59e
-
SSDEEP
3072:ymb3NkkiQ3mdBjFWXkj7afoHVpx+dGoH//UAAX:n3C9BRW0j/1px+dGkHUAAX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 042c98f19428ec8a191794325206de3b_JaffaCakes118
Files
-
042c98f19428ec8a191794325206de3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ