Static task
static1
Behavioral task
behavioral1
Sample
42b51d1ea1e4505c59129ed37e4b97da_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42b51d1ea1e4505c59129ed37e4b97da_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42b51d1ea1e4505c59129ed37e4b97da_JaffaCakes118
-
Size
96KB
-
MD5
42b51d1ea1e4505c59129ed37e4b97da
-
SHA1
b7dd71f478257dd41dd453ba5d5680737f13889b
-
SHA256
2419f6c9e9286738a2d16f9222fbc314269e41f580576142d84075f69a946bbd
-
SHA512
25dfcdac7f2e4d3fa09496649f042ca0a37ca7390be8024ddaa6c39fca2504ba832f116eb9892bc23d2a9e36fbcb24b649d00a6746db5cc3acdd25eb6c90a6bc
-
SSDEEP
1536:3058Ifry8MKiv+BF2piY+6FNNfEU6seQhacAc9UejaDC41Nrvew7kRMgQn1:3058Ifry8viv6kSU6c396pfrvl7sM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42b51d1ea1e4505c59129ed37e4b97da_JaffaCakes118
Files
-
42b51d1ea1e4505c59129ed37e4b97da_JaffaCakes118.exe windows:4 windows x86 arch:x86
371a88181ea68966d5fe8e41a2f864e5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
IsBadCodePtr
VirtualUnlock
GetSystemPowerStatus
SetConsoleHardwareState
GetEnvironmentStringsA
QueueUserWorkItem
OpenProfileUserMapping
VerifyConsoleIoHandle
GetStartupInfoA
ExitProcess
Sections
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
WEIJUNLI Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ