Static task
static1
Behavioral task
behavioral1
Sample
42e1180ee76f1b305d7e5e8b72f8c7b2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
42e1180ee76f1b305d7e5e8b72f8c7b2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
42e1180ee76f1b305d7e5e8b72f8c7b2_JaffaCakes118
-
Size
631KB
-
MD5
42e1180ee76f1b305d7e5e8b72f8c7b2
-
SHA1
31bf38b7468f41013565a26f79ba82ee13d94f95
-
SHA256
e24ef9931c9a33407f9545343f43c04dc8f58515ff34d1bbd2064f22570ec5d9
-
SHA512
6afa0d6234243df80d7915871bc8d5c1b7a3b9be835c3fbfa0824eb8d07a31b159653b3d72b6d79e73d8bab703b1d36c0df75d90ab916739cf1bcfd6a4e8305c
-
SSDEEP
12288:nor7F90HNLDElqKvOG/xirOemXI400n0l4qMOyISq0UaWZkRBOvnhw:sxgmqs/A/54T0lheZknZgonh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42e1180ee76f1b305d7e5e8b72f8c7b2_JaffaCakes118
Files
-
42e1180ee76f1b305d7e5e8b72f8c7b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 12.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 631KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE