Static task
static1
Behavioral task
behavioral1
Sample
42527a8c3b691c4a4d541117bf02c88b_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
42527a8c3b691c4a4d541117bf02c88b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
42527a8c3b691c4a4d541117bf02c88b_JaffaCakes118
-
Size
1KB
-
MD5
42527a8c3b691c4a4d541117bf02c88b
-
SHA1
0baae691a67f40b2b2d60311daa04e17cf2e104c
-
SHA256
e951a47706766e4e87f2cc44fe97353b5de3ce2e7615f94dd02d49678fdb986b
-
SHA512
01fe93cdfc44c2a5a887948a16dd40e84e4a55620d240a86d59a5814af8d0b923ff059bd812e3a67d704576f1dc9ec549796c019a3642e17ffd9eb30cc0f2310
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42527a8c3b691c4a4d541117bf02c88b_JaffaCakes118
Files
-
42527a8c3b691c4a4d541117bf02c88b_JaffaCakes118.exe windows:1 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
.text Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 399B - Virtual size: 399B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE