Static task
static1
Behavioral task
behavioral1
Sample
42784ea86bd797d8dde7c1683499ac4c_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
42784ea86bd797d8dde7c1683499ac4c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
42784ea86bd797d8dde7c1683499ac4c_JaffaCakes118
-
Size
20KB
-
MD5
42784ea86bd797d8dde7c1683499ac4c
-
SHA1
b26b3774e1b8017dc95e505d51651bbd02db4af2
-
SHA256
e3ed65fd012a13aa04966bfc5df52c53f662ac1d32c7dcceef28065aaf0b4096
-
SHA512
2f09441e8a1528a697b12ef6f1a174fa6743b0f109ade171d262e82dd8b7ab4a330f859f922180c3d918f09c0f6ea8e6ebb4a20ab535667f19a749a697bae0ee
-
SSDEEP
96:QrkXyr5tjiCRqsm23XDjesl1dvlprZXUJL/Nj7n11s2to:7Xk5tGixm6xlpQsB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42784ea86bd797d8dde7c1683499ac4c_JaffaCakes118
Files
-
42784ea86bd797d8dde7c1683499ac4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE