Static task
static1
Behavioral task
behavioral1
Sample
42f5aa86f0bc0a11d1d068b03064832c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42f5aa86f0bc0a11d1d068b03064832c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42f5aa86f0bc0a11d1d068b03064832c_JaffaCakes118
-
Size
139KB
-
MD5
42f5aa86f0bc0a11d1d068b03064832c
-
SHA1
73f04dfb9f4d35260d2e79a7e6d90cc17c7c4487
-
SHA256
0a17653a9b8f3e2d7b388fcd16fc22b89d42f4f028750b9af6e6c2dcfb587811
-
SHA512
175bd22de2f8cf5050de5e1853412d16cb9ddd1464fae3e546c4908b8b278d2562b24c63bd2abbb906dcf94e7b318b75dc44ca72b57bd92719e53770bc38795d
-
SSDEEP
3072:j6vPgm38nunfOwn12UrQBm7lwiM73ewj/Kjg/M1NU:jCPZIundXRlwJGjg/Uy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42f5aa86f0bc0a11d1d068b03064832c_JaffaCakes118
Files
-
42f5aa86f0bc0a11d1d068b03064832c_JaffaCakes118.exe windows:4 windows x86 arch:x86
ee83ad8e93e8f9f96941fa443cf706da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__errno
__getreent
__main
_ctype_
_fchown32
_fdopen64
_fopen64
_impure_ptr
_lstat64
_open64
_stat64
calloc
close
cygwin_internal
dll_crt0__FP11per_process
exit
fchmod
fclose
fflush
fgetc
fileno
fprintf
fputc
fread
free
fwrite
getenv
isatty
malloc
perror
realloc
remove
rewind
setmode
signal
strcat
strcmp
strcpy
strerror
strlen
strncpy
strstr
ungetc
utime
kernel32
GetModuleHandleA
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE