Static task
static1
Behavioral task
behavioral1
Sample
42f3637fb2535067357a0d91c4ce7d8a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42f3637fb2535067357a0d91c4ce7d8a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42f3637fb2535067357a0d91c4ce7d8a_JaffaCakes118
-
Size
102KB
-
MD5
42f3637fb2535067357a0d91c4ce7d8a
-
SHA1
75442a362e5f1acb99c234e368a70387da5b3c01
-
SHA256
449f0e2d04e49c235be6d28a0ddb3fbbff647e5fc871d0b9b82bf5e7fbd64dbc
-
SHA512
394cdd731cf2415e7d24871976f8161278b37a5ef4941200bc2d4b91aadb138a6881ab1ed85676c9a89fb616849783b0ec59b61e3cae8e9b0c22b83d9061db1f
-
SSDEEP
3072:Dv4I6BZMq6YSTV22CG14dFGt8HhbpkWd:De
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42f3637fb2535067357a0d91c4ce7d8a_JaffaCakes118
Files
-
42f3637fb2535067357a0d91c4ce7d8a_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 8B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 96KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ