Static task
static1
Behavioral task
behavioral1
Sample
42f11744d42f37c323061d1adf153e12_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
42f11744d42f37c323061d1adf153e12_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
42f11744d42f37c323061d1adf153e12_JaffaCakes118
-
Size
13KB
-
MD5
42f11744d42f37c323061d1adf153e12
-
SHA1
8302dda095b2fb9e1c3f2823a9490fcb9e9697f9
-
SHA256
dde15775e2fbd687168b5a7af89d22522a80c4a52e197a2b019d0c939ac019b0
-
SHA512
5bbb94d43fb0a6a30add278022829bf22f760d860a6b8d72c730a932fe7a1f04a3bbbed9e87c73dd36cbd20a535240177c06ce5da09a0fb7ef8606d94c48528e
-
SSDEEP
384:TQNTbZzzCRcKVQatn8UNQIcEZvKzEXqYE5HQuAbRkgwhN29R:cNTRCRcKpNQInZKzE9E5w9bRkFI9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42f11744d42f37c323061d1adf153e12_JaffaCakes118
Files
-
42f11744d42f37c323061d1adf153e12_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 813B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddt Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE