Static task
static1
Behavioral task
behavioral1
Sample
42d65c459b3182952626fed7330c2d83_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42d65c459b3182952626fed7330c2d83_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42d65c459b3182952626fed7330c2d83_JaffaCakes118
-
Size
33KB
-
MD5
42d65c459b3182952626fed7330c2d83
-
SHA1
6920b43112a1dbdb651da0795ef39b6d42b26c9f
-
SHA256
d370542bb6019c56745541821082ba7f310a154436e508a6fbf539e92e2134f4
-
SHA512
2e6c24184a724fc169aff6729ebfdeddbaa9d0f43d00f0cb8bb66f66e2e7f967b5154ef0b9e22f2d0f97e04f563bb48f0499ccd336766e6eee472bc9284736c9
-
SSDEEP
768:DV7eUPwYRlRNEyTWHe97zyvb0pHGr9j9d:DxFP1lYaD84HE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42d65c459b3182952626fed7330c2d83_JaffaCakes118
Files
-
42d65c459b3182952626fed7330c2d83_JaffaCakes118.exe windows:4 windows x86 arch:x86
f35da0feaeb1ea3121dbe4b43d43d5fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32.dll.
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE