Static task
static1
Behavioral task
behavioral1
Sample
42761864355505037d32ad00108f382c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42761864355505037d32ad00108f382c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42761864355505037d32ad00108f382c_JaffaCakes118
-
Size
7KB
-
MD5
42761864355505037d32ad00108f382c
-
SHA1
0c6bfa14be9e748b3d8745cd5147c9427a2c5a33
-
SHA256
099cab77a127c6af62e804336955e53fe16ad0935b1e3b2eea57c3d537f1ae1f
-
SHA512
c75fde69489e801457437439af222bf80377df904ca0106438a789fed6852865214898a5a965bceb3420661ec76920a81ebe4a0aef5c5fdc13c02bdade291c1a
-
SSDEEP
96:jXxEUOHGKoxTBBW7dq5a95NkgGVW3/vfPe:jX6iKoxTBkY5wsglPvO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42761864355505037d32ad00108f382c_JaffaCakes118
Files
-
42761864355505037d32ad00108f382c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 873B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rodata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
radata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE