Static task
static1
Behavioral task
behavioral1
Sample
42a54ec9ab074c043308a597ef2cde5c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42a54ec9ab074c043308a597ef2cde5c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42a54ec9ab074c043308a597ef2cde5c_JaffaCakes118
-
Size
1.5MB
-
MD5
42a54ec9ab074c043308a597ef2cde5c
-
SHA1
e328c5ab344ba5a12ddea21ca04fa3c2b0ffd9b0
-
SHA256
7f52f25c1390429e6fd88b1a57e7d320450abaf79adc06996416a0ab08f337bb
-
SHA512
f7349aa4d52f3ca2ec72acb36a8dc00573ac0ef3e5f370d3ceaf22cfd1c4017cfa21f74f41048cd62f7a0d11cc04225b6927c7c5750e2afd911747a2bb61b4f4
-
SSDEEP
1536:4nngHkMFzyExf9gzZ+KQuXQsVAJQWW2dwVw7qW3MwY1wHFKMKfcwvjAjrlzEQTlt:4ng1VDZ7sXyX+YkR8GQTziZil
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42a54ec9ab074c043308a597ef2cde5c_JaffaCakes118
Files
-
42a54ec9ab074c043308a597ef2cde5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ