Static task
static1
Behavioral task
behavioral1
Sample
42a5d92866682dc633af1a382f9e4966_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42a5d92866682dc633af1a382f9e4966_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42a5d92866682dc633af1a382f9e4966_JaffaCakes118
-
Size
366KB
-
MD5
42a5d92866682dc633af1a382f9e4966
-
SHA1
9bad40c7bf9ace3d97e0b4a8660a77fe25e9a0c5
-
SHA256
2d928659f128de033f064f969d6859531e583785b8b58ea9fecd20af234fdc8f
-
SHA512
b7fb1f1f4317d38629c67a27904756589c4fb1da97be78e38f70b8863e2eee6b5988d40bc830cb0b965ca13d0798a9ce18e7d23a270a8b599e57b0c353565593
-
SSDEEP
6144:qkeMkEUV1DvyCTnZBIGrSWFu/YkKnWAFtagNlF9gEs0fSnLrj24r:q1jECVLWKWAFBNlTgEE5r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42a5d92866682dc633af1a382f9e4966_JaffaCakes118
Files
-
42a5d92866682dc633af1a382f9e4966_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
\dmc9f"w Size: 512B - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rWyT(IDj Size: 365KB - Virtual size: 382KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE