Static task
static1
Behavioral task
behavioral1
Sample
42efb47d17cf12fe155c09fe559dfb81_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42efb47d17cf12fe155c09fe559dfb81_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42efb47d17cf12fe155c09fe559dfb81_JaffaCakes118
-
Size
338KB
-
MD5
42efb47d17cf12fe155c09fe559dfb81
-
SHA1
7d7b952e83a780520d6e7554be8aebfa04f03621
-
SHA256
867e6f4652abc275e6e8f83217fed6a216a80a440ceafdc67838cccc559b7145
-
SHA512
bc3e874dc74fcffd7b512aedc9d3991a8937f0a7b0e1282bc47b2c0e3698ae258ae867d9b552dc1c4a768c2baf464e1886206835c635886785f2611c7216ed1f
-
SSDEEP
6144:Ls0Vz+VZd6rzHCb+77fOLrxtpjLKD1yg//Zuv2aUTxjjjL5yONN6OSjnhG:Ls0Vz+fd697b0LKJygHLaGjvFymN2G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42efb47d17cf12fe155c09fe559dfb81_JaffaCakes118
Files
-
42efb47d17cf12fe155c09fe559dfb81_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.icode Size: 842B - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.entry Size: - Virtual size: 3.0MB
.bss Size: - Virtual size: 400KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packed Size: 312KB - Virtual size: 316KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 923B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE