Static task
static1
Behavioral task
behavioral1
Sample
42cf8cc6777a41796ba8c7785745ab5a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42cf8cc6777a41796ba8c7785745ab5a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42cf8cc6777a41796ba8c7785745ab5a_JaffaCakes118
-
Size
94KB
-
MD5
42cf8cc6777a41796ba8c7785745ab5a
-
SHA1
0c01e871680acc62c5081a6ff74ca95b6f3730d8
-
SHA256
5915d7292d067159098e4d28bf7b359b5da8d9803a4465e940b166a235806a16
-
SHA512
f0aacfe11f2696326818153e1ee956bcc9150425e4d00080d60d1af6227ea25651e95afa9c6d991939448b6350ff346f816522f4af6f8a08a95420c9f40f83c2
-
SSDEEP
1536:jjnGkbY3r5hhJYmSBFDYMIpgoF9VfQq1sY73Abs1j7P8BUwMIAvU:ny5P8DIKS3GKcQPIvAvU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42cf8cc6777a41796ba8c7785745ab5a_JaffaCakes118
Files
-
42cf8cc6777a41796ba8c7785745ab5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ