Static task
static1
Behavioral task
behavioral1
Sample
420a375f044a45970ca1b92a3568513f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
420a375f044a45970ca1b92a3568513f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
420a375f044a45970ca1b92a3568513f_JaffaCakes118
-
Size
637KB
-
MD5
420a375f044a45970ca1b92a3568513f
-
SHA1
1af3d63b75f2904a12603db7c545619782ad8be1
-
SHA256
c87d525105b51d9c2da5f20f5a630f1f31c99ec513e2cade4fde3ef844c47c44
-
SHA512
60a95d072bef315b19e3a7bd2dc3da556ebd12e559d535c5bc38313f0a5b4082b9747cc196c66cca1210b34ae213e868e65fad6178293eb5af8101141eee3a8f
-
SSDEEP
12288:pvF2ex4+KhsymXMwZzCii4oY7v1mi93FQZycECfOnEqXoALEuLuYRpIwAFT:pvF2Z+bp8wViCfFQZycEpnEKoALEuL3Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 420a375f044a45970ca1b92a3568513f_JaffaCakes118
Files
-
420a375f044a45970ca1b92a3568513f_JaffaCakes118.exe windows:4 windows x86 arch:x86
89f6dbb1b6e0d9f79f3aaa7b6dd1471c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
GetCurrentProcessId
GetModuleHandleA
FreeConsole
GlobalMemoryStatus
HeapCreate
GetSystemTime
IsDebuggerPresent
GlobalSize
ResumeThread
VirtualProtect
GetACP
WaitForSingleObject
HeapDestroy
GetTapeStatus
GetUserDefaultLCID
GetTimeFormatA
InterlockedExchange
LoadLibraryExA
PeekConsoleInputA
GetCommandLineA
user32
FillRect
GetClassNameA
FrameRect
ShowWindow
EndPaint
wsprintfA
GetDC
GetWindow
DrawTextA
SetForegroundWindow
GetCursorPos
GetFocus
BeginPaint
AnyPopup
GetTitleBarInfo
GetParent
CreateIcon
ReleaseDC
DragDetect
ntshrui
IsFolderPrivateForUser
GetNetResourceFromLocalPathA
SetFolderPermissionsForSharing
GetLocalPathFromNetResourceA
DllGetClassObject
hnetcfg
IcfFreeProfile
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ