Static task
static1
Behavioral task
behavioral1
Sample
42f63af50332448358dda3aa96b683b1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
42f63af50332448358dda3aa96b683b1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
42f63af50332448358dda3aa96b683b1_JaffaCakes118
-
Size
52KB
-
MD5
42f63af50332448358dda3aa96b683b1
-
SHA1
13e13823cae7df84d9f799a12fd7f2d954694739
-
SHA256
a12e34345f02892502a5731e1ee362225507a6288f8af73b786f0aaf3c3d4c09
-
SHA512
918072442645eb4220e403d68d73479764e7acde0dfca75f71c55cc9a688366610069967cba9c9c9f15801626ec7cba9f2d8a3bd6b325965816a5275407b2f59
-
SSDEEP
768:BGNgpGN2Mg5JUecVAdOq6u8gQ1wStEqynF1tuuorYHRcnxja4V0wSgH:BGipGN2MgJU1ud0PcSPyFOuHi1t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42f63af50332448358dda3aa96b683b1_JaffaCakes118
Files
-
42f63af50332448358dda3aa96b683b1_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
����a Size: 47KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE