Static task
static1
Behavioral task
behavioral1
Sample
d42b9fc39db85d6dcc1fb46446f0fd8e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d42b9fc39db85d6dcc1fb46446f0fd8e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d42b9fc39db85d6dcc1fb46446f0fd8e_JaffaCakes118
-
Size
15KB
-
MD5
d42b9fc39db85d6dcc1fb46446f0fd8e
-
SHA1
3e94863aafe98a6a14031bd2410ae08525fde342
-
SHA256
5a7ace3cd7f057e57f13514a08fcbbefe49200ea88a0aaf209b3c724069fcf3c
-
SHA512
e13a7c4a396b9d76abaa084188088f8c5da0e17eb2a2d1d884a59fce62ceb1b9e9bc8a8d858ffbae4f5f9edf637562ba266292f4a102928f18832f0a1324938a
-
SSDEEP
192:OFw4s5pwuRYyLpwkh8TEBRW3l0vdV+Dyj0+YkXIEYG4qpzHCQ:OMmua6pwS8wS2vDVj0bJG4Mb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d42b9fc39db85d6dcc1fb46446f0fd8e_JaffaCakes118
Files
-
d42b9fc39db85d6dcc1fb46446f0fd8e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE