Static task
static1
Behavioral task
behavioral1
Sample
42f5aa48186a7064a1e6d904382d7140_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42f5aa48186a7064a1e6d904382d7140_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
42f5aa48186a7064a1e6d904382d7140_JaffaCakes118
-
Size
44KB
-
MD5
42f5aa48186a7064a1e6d904382d7140
-
SHA1
d6f2f9e3698e8612059f850087e8891f25825a74
-
SHA256
57907c8332f9db0d813aadb446a49231be2a4f297ee8aa61b577949bac73afc0
-
SHA512
b082efa7c21d72c43f11030b67ee800dcf19b8e547f8dd3515382d652cdb8004d5e10256b550595b858000c83e586e56d08163c56f07db57ca60c861a9edc801
-
SSDEEP
768:IJbUcjZzhMYZ+022sZJuURGR2pAnXgL6zU0aFtBSssfZEB18yVejg:qtNFW92sM2pzL6zFKhsfZly
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42f5aa48186a7064a1e6d904382d7140_JaffaCakes118
Files
-
42f5aa48186a7064a1e6d904382d7140_JaffaCakes118.exe windows:5 windows x86 arch:x86
65032a466ca4b821d5d40ab637711fb9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadCursorW
MsgWaitForMultipleObjects
kernel32
lstrcatA
Sections
.gnoj Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mnmpsd Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kbuxyl Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ