Static task
static1
Behavioral task
behavioral1
Sample
42261c84ebae864fe177e8b839ad0451_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42261c84ebae864fe177e8b839ad0451_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42261c84ebae864fe177e8b839ad0451_JaffaCakes118
-
Size
61KB
-
MD5
42261c84ebae864fe177e8b839ad0451
-
SHA1
145fd5c4f63c77ce42dbaa9e0e469dda8c187818
-
SHA256
2dd646c3c9804def2f77aa91c55b885718f9dcd74c664252f298ea5773275f05
-
SHA512
7ff222da288adbc44a6d76822eebddac5f746a845fec10d0a35210f5dbd1eb0177b7d08b98ff434b397ecf2082756b95f2cea1790aa89e87e915ad8618bc7d36
-
SSDEEP
1536:KWyAL3WlKfl1GIFVbKMY0l2c7/B/R+3eEBNU1IpHYf:KWPL3WlK+IFVbKMY0l2cbaUqFYf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42261c84ebae864fe177e8b839ad0451_JaffaCakes118
Files
-
42261c84ebae864fe177e8b839ad0451_JaffaCakes118.exe windows:4 windows x86 arch:x86
d8a361c7e1fbe939d4277167979731d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
user32
Sections
.data Size: - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE