Static task
static1
Behavioral task
behavioral1
Sample
42d64fd991d6f64619537d951ef513cd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42d64fd991d6f64619537d951ef513cd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42d64fd991d6f64619537d951ef513cd_JaffaCakes118
-
Size
22KB
-
MD5
42d64fd991d6f64619537d951ef513cd
-
SHA1
bdbaa57e4a51f5089109f9a46b0f41da528ef431
-
SHA256
460d38e9a3f834b7ad38b8472f6051d7ede9106d0bb9b162d4b55bce301da1a9
-
SHA512
e46aa03b2c98d2c12a1527bf0a36b0c12a1b2036b43bf29732dd3caca5adbef72882bbc83d0554389970de3e78c1e3ebc1bc7377de9b7d220331121456c2c907
-
SSDEEP
384:1XyAFd9ky3T8JnFf8ohNmMqV0xpp7UhuMPid2xwD27etdbjPWGDqfhV/4tKFZ:vdonFf8IN4gQh9xxweeLPDqfhdV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42d64fd991d6f64619537d951ef513cd_JaffaCakes118
Files
-
42d64fd991d6f64619537d951ef513cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Ramzey Size: 104KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE