Static task
static1
Behavioral task
behavioral1
Sample
42e010167c67bc810c35f0ac9eda79ce_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42e010167c67bc810c35f0ac9eda79ce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42e010167c67bc810c35f0ac9eda79ce_JaffaCakes118
-
Size
25KB
-
MD5
42e010167c67bc810c35f0ac9eda79ce
-
SHA1
c071fa102cddd58f216d5cb05adf6d888d40beb2
-
SHA256
4b7170959476b54f52577c6f0b3959650d9a9c55ccc61d14bfe17db7e4b32bfd
-
SHA512
292b099431597cc5972c2d9b680b05b8f11f2fb3ae1f1fccf1fe5cf9717999269d9ce3ac8eff0d5247e811c5eb8b271d56d6f18312c051e2a36cada63774325c
-
SSDEEP
384:BjQ9KaonymD31nIlv3FGdm21aoddBJtzgrz7Ix8ho92cgelFudJ+WGkVHHXay:gKzyU3Gd3FQ+EBTuvW8hoK4FQr9HHP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42e010167c67bc810c35f0ac9eda79ce_JaffaCakes118
Files
-
42e010167c67bc810c35f0ac9eda79ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE