Static task
static1
Behavioral task
behavioral1
Sample
42ad24ddf58d426571d4c6730d3185e0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42ad24ddf58d426571d4c6730d3185e0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42ad24ddf58d426571d4c6730d3185e0_JaffaCakes118
-
Size
9KB
-
MD5
42ad24ddf58d426571d4c6730d3185e0
-
SHA1
363f63ef62a5d346f5ced2a8e8038860c0496019
-
SHA256
8cd56131544c0762cb0dcdac034f1c6899e1adbb63c5207b7fea87af3b815f97
-
SHA512
052df1582cc5cbee9ce047d06457b92ceebcb3ba4c403a4c655389dfcbdaa31b23a15d34a3591ee0112f9ceb40813114650e01306d0f99eba9c70305a2ddfa53
-
SSDEEP
192:bg6WZDWfGGP/shRhh8AvzY6Sxf9vogI1LgWT/OmwwJh49q8ox/:k6WZDWhPofh9bYjxBoTB/rwwJhBZh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42ad24ddf58d426571d4c6730d3185e0_JaffaCakes118
Files
-
42ad24ddf58d426571d4c6730d3185e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
b8111320f794d9e62a7ffe5d84bed59a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualFree
VirtualAlloc
Sections
okpack Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
okpack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
okpack Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE