Static task
static1
Behavioral task
behavioral1
Sample
42b3c91a40fbb1f2081bb87b9056b47a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42b3c91a40fbb1f2081bb87b9056b47a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42b3c91a40fbb1f2081bb87b9056b47a_JaffaCakes118
-
Size
309KB
-
MD5
42b3c91a40fbb1f2081bb87b9056b47a
-
SHA1
a51b25eee4ee6bb637ed6ba2da8edf64ed0c7381
-
SHA256
9ee6a4f079122af5918c31ebb85e1eb66f764b6630ae0cb8bb9043afa5dfb5b3
-
SHA512
6c9d698aa5626d9e57b5f5fb8dbd16cb9809eeb5fbf6ef3df0b6a254af04c39fe59ab5934d24fd51869301369d7f53ed72ab753f982861d4852b5f0ce8cf46a7
-
SSDEEP
6144:Z+Xt+wZD5Q8n1eXiapmfc+3CA2Jq+K938huXAq3laMVn6:Z+XtbPnoFYcHJJq+K9Mhns
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42b3c91a40fbb1f2081bb87b9056b47a_JaffaCakes118
Files
-
42b3c91a40fbb1f2081bb87b9056b47a_JaffaCakes118.exe windows:1 windows x86 arch:x86
db801804fa7cdce0a8c8826fa07882b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtCurrentTeb
opengl32
glScaled
kernel32
ExitProcess
VirtualAlloc
Sections
.text Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 906KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ