Static task
static1
Behavioral task
behavioral1
Sample
42072efce7a7cb0dda67b105e0be1f2c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42072efce7a7cb0dda67b105e0be1f2c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42072efce7a7cb0dda67b105e0be1f2c_JaffaCakes118
-
Size
431KB
-
MD5
42072efce7a7cb0dda67b105e0be1f2c
-
SHA1
2653e0819b8ad5e3cbf3203e42205db71a3f923b
-
SHA256
786e972d6f391d2f2b60cb978bc75260186b5abfc3dd3be5e2e21d9e9c7dd3ec
-
SHA512
bebcff7303c27ab4a187224e95ef67d4c7aa88f38618537b43476e5e1b0275c1aea0fd48e47987b2585f0501b7f68b61cc70222b54fb67113e81d32cddc411ca
-
SSDEEP
6144:BmRHMj03yQ23OqeqiHFDVVVcThI966AGkAjOpoaY7SZNhEridUfjRAVC0YTVcMwG:Mn3GKFDVmq6xGJOpqGSAIzVADq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42072efce7a7cb0dda67b105e0be1f2c_JaffaCakes118
Files
-
42072efce7a7cb0dda67b105e0be1f2c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 22KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 108KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 289KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE