Static task
static1
Behavioral task
behavioral1
Sample
42a0e981a63c2cbf1aa72e8a8fd7d17f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42a0e981a63c2cbf1aa72e8a8fd7d17f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42a0e981a63c2cbf1aa72e8a8fd7d17f_JaffaCakes118
-
Size
214KB
-
MD5
42a0e981a63c2cbf1aa72e8a8fd7d17f
-
SHA1
d3e32acbfe9727e610024b74d2191957e3e2d15a
-
SHA256
b763c6193d7f30f2ea480b3fe8ed0fee415d42ef4d8c4f63de48ca20719825f0
-
SHA512
e0372ea888ba9203fbe698e17f2b87b040666c02b7165146ada29e77bf4a3b8f26fc12d82099ec6da5dbb572105f61168f395d237772f3edb74aa73dc7e0a43e
-
SSDEEP
6144:cCY2OlX6CVD1+PTXVdHU0PjX8uX+gcyhFO:cNldVUPTXVC0PLzX+gcyh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42a0e981a63c2cbf1aa72e8a8fd7d17f_JaffaCakes118
Files
-
42a0e981a63c2cbf1aa72e8a8fd7d17f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE