Static task
static1
Behavioral task
behavioral1
Sample
42a76eda64f45e44b7b07cc851af6db5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42a76eda64f45e44b7b07cc851af6db5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42a76eda64f45e44b7b07cc851af6db5_JaffaCakes118
-
Size
388KB
-
MD5
42a76eda64f45e44b7b07cc851af6db5
-
SHA1
109647fee234792cea3b972e43909366d1dc3fb7
-
SHA256
5873f5c920d9755d07f3b71ba0d4d42a80c9fadb9e8248b1aad55d212d1377ee
-
SHA512
b3d12c3fa44932df6cc0a7027d01159fa2316e99c29406108243d657b9ef8589fba3ddadcca9007af5a75b6e010d44a4d1e33ed723b64bca4d2b232017dec684
-
SSDEEP
12288:8kxFS35fi4YGuQpVS7uu11/CsYQ7feEP:8uU6TQuiwZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42a76eda64f45e44b7b07cc851af6db5_JaffaCakes118
Files
-
42a76eda64f45e44b7b07cc851af6db5_JaffaCakes118.exe windows:4 windows x86 arch:x86
8814fca28f1a0fe8376675dbba9c2333
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
RegisterClipboardFormatA
gdi32
PtVisible
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
advapi32
RegEnumKeyA
shell32
ShellExecuteA
comctl32
ImageList_GetIconSize
shlwapi
PathIsDirectoryA
oledlg
ord8
ole32
CoInitialize
oleaut32
OleCreateFontIndirect
dbghelp
ImageDirectoryEntryToData
wininet
HttpOpenRequestA
iphlpapi
GetAdaptersInfo
Sections
.text Size: 358KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE