Static task
static1
Behavioral task
behavioral1
Sample
42a3b11b325ff31d5d6f2e5555a8ec47_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42a3b11b325ff31d5d6f2e5555a8ec47_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42a3b11b325ff31d5d6f2e5555a8ec47_JaffaCakes118
-
Size
359KB
-
MD5
42a3b11b325ff31d5d6f2e5555a8ec47
-
SHA1
4435f24d4333db5fd6f3ffcb8090ad6aaa2720e6
-
SHA256
36449c6065b88e764078119565af99e990f3fd60bb2d67f003dd92e9e489f4c6
-
SHA512
ff7cc3b3f1a3b07b483b3487c8e70119eda97de63b511a0b799a30f4ea1596b1f2869504bcf7bbd23c6542b074c132abdb7af625350adf061596fa68749a5f61
-
SSDEEP
6144:rloOx+HSyxiuXu635Q9MivQIugOKaVBooIVCgCUJAiZUtXYsdz7rUDxcS:rhcS9uXl30MKQIVjaIoqCg5JPZUhVP2z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42a3b11b325ff31d5d6f2e5555a8ec47_JaffaCakes118
Files
-
42a3b11b325ff31d5d6f2e5555a8ec47_JaffaCakes118.exe windows:4 windows x86 arch:x86
5cc55d6a75b8a879879d7e8ec39159d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
EnableScrollBar
EnableMenuItem
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
CreateDesktopW
CharLowerA
kernel32
FlushFileBuffers
lstrlenA
lstrcatA
ReadFile
InitializeCriticalSection
GetTimeFormatA
GetSystemTimeAsFileTime
GetStartupInfoA
GetPrivateProfileStringA
GetLocalTime
ExitThread
Sections
.text Size: 15KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 333KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ