Static task
static1
Behavioral task
behavioral1
Sample
42931ade6480e4a911346816442f7f15_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42931ade6480e4a911346816442f7f15_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42931ade6480e4a911346816442f7f15_JaffaCakes118
-
Size
20KB
-
MD5
42931ade6480e4a911346816442f7f15
-
SHA1
1f112e56ce254bfb45b4c3ec5f53ff82d8d951b8
-
SHA256
45639823768dbc0612421c45cff7a7ba2aa876d5f336591449fcbd3758145bf9
-
SHA512
c71ff429d833640cdc3905e8c7c169a9b4b655820ce282f21fa1641dbe1497931e299d80be5d029e69d963857ebf9fed2f001ad8fd096e8f56e3fa2f90654aa4
-
SSDEEP
384:AQxjIKKC3Qd4L5pyvmm+fxv+bAO7dZXEz9OEjKfll9opYHPYXj+8FgpYZR:AqUPbGpcmm8xvuAk9E5OEet0tXj+YqYz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42931ade6480e4a911346816442f7f15_JaffaCakes118
Files
-
42931ade6480e4a911346816442f7f15_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE