Static task
static1
Behavioral task
behavioral1
Sample
42db7f8dbd1d0bc9eb9c57cd3a48a59d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42db7f8dbd1d0bc9eb9c57cd3a48a59d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
42db7f8dbd1d0bc9eb9c57cd3a48a59d_JaffaCakes118
-
Size
369KB
-
MD5
42db7f8dbd1d0bc9eb9c57cd3a48a59d
-
SHA1
499747427e5e66e6848d36f26d02b3f4c8328048
-
SHA256
22ecd828e3e7c3dc66cac6860667b599863e8e62c688a1a949209afad111b460
-
SHA512
665f667d11f65b41bda557ef98be6347dd41f944a62c85bfb67485fde4974a16b0701d76a49b88e75644e9afb3896631efa7def1d795d9f48b5b1600c09a7caa
-
SSDEEP
6144:WgCM58atA+d/B+dxSepHwjTRSXpRLtQ0ZLg4TyQOI5JgpcvqNplcxu7p4jKjuK8:ZCSA+dZ+dxSeSw5h5T0Iw5paTlf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42db7f8dbd1d0bc9eb9c57cd3a48a59d_JaffaCakes118
Files
-
42db7f8dbd1d0bc9eb9c57cd3a48a59d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 197KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 139KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE