Static task
static1
Behavioral task
behavioral1
Sample
42e3d52dabf47bdc4fbf1bb1ec8773e1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42e3d52dabf47bdc4fbf1bb1ec8773e1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42e3d52dabf47bdc4fbf1bb1ec8773e1_JaffaCakes118
-
Size
2.4MB
-
MD5
42e3d52dabf47bdc4fbf1bb1ec8773e1
-
SHA1
065d6b32776ced5eeb9dbf5edfecf35457cd074c
-
SHA256
92d90e54cd69656fb5ae8064fc281f15c787ac4a8e2a436a76759169b2e3457d
-
SHA512
9bc70f38c9559bd926205a8f6e1fd1da50dbe5cf2b7b62c5900c331234b33cebf70e8a5efd34d6d664afa0f2ef99b4f18dc7b8e39c90d8d356c0bbcc57d97ba7
-
SSDEEP
24576:LAkRywSBeig/1YHFg0+9TKwIcN4Yn9/52D9VHInY6pPDEZ64dXF03TR4OVeDWKHZ:EwcBW1+iONchn9/C9VHgY6pPH8DWk2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42e3d52dabf47bdc4fbf1bb1ec8773e1_JaffaCakes118
Files
-
42e3d52dabf47bdc4fbf1bb1ec8773e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 244KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ