Static task
static1
Behavioral task
behavioral1
Sample
42463b9b4a82d0a62dad31b74065ae42_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42463b9b4a82d0a62dad31b74065ae42_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42463b9b4a82d0a62dad31b74065ae42_JaffaCakes118
-
Size
1.2MB
-
MD5
42463b9b4a82d0a62dad31b74065ae42
-
SHA1
24691ddcd3a19cd4691a9db465a65e43ec8bdf3f
-
SHA256
3131c549a8f1310ee00169e65ed05c1f21f16391db139040e7e50621fc2ed939
-
SHA512
d30592d710fc6d0dd6c4cf6a0afac2d2021bd9e5174a83cec72b7a8a95df3160dfef065d304eb6e4d9032e9bacf1eadcc86387f4ed2977b0f9c5d5e28f8162c2
-
SSDEEP
24576:y6iU4ucwdW5A2RJr/k3/vcIkA33PQlhRJ9+AQ8/eG3npeZrI:yM4zRp/AnPYhb9+HeZi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42463b9b4a82d0a62dad31b74065ae42_JaffaCakes118
Files
-
42463b9b4a82d0a62dad31b74065ae42_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.ziyue! Size: 784KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.373250 Size: 460KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE