Static task
static1
Behavioral task
behavioral1
Sample
42e880c70368e92e32e81d5e5d152cb3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42e880c70368e92e32e81d5e5d152cb3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42e880c70368e92e32e81d5e5d152cb3_JaffaCakes118
-
Size
391KB
-
MD5
42e880c70368e92e32e81d5e5d152cb3
-
SHA1
9e5feaa94c02f9fd44abfc1e0278710219701600
-
SHA256
1abfec241c5e860aa59bcf69f7d093c8a7522ba6a0a7a3e846c53ab36482a8b6
-
SHA512
4d1b9bab7684eb4e4e8cb300856d8103a0bff6f602f8bd915139d756936df7cb48c6c8676e714fed6d643a7e01755e026a201ff7c24b2bc2a4c79bf5fb7ea950
-
SSDEEP
6144:PoxhjIIEgR0odHzNqeXD6huP3gov1o6F1/yNgYVlzTmKjitplp3nmAaT05tGQl:PoxhIIecpu6YFTzTZjiFVvZ02
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42e880c70368e92e32e81d5e5d152cb3_JaffaCakes118
Files
-
42e880c70368e92e32e81d5e5d152cb3_JaffaCakes118.exe windows:4 windows x86 arch:x86
372cb1afc2a93c932bf474b9fcb8cb7f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualFree
VirtualProtect
VirtualAlloc
GetModuleFileNameA
user32
wsprintfA
MessageBoxA
Sections
.data Size: 352KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asprsc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ