Static task
static1
Behavioral task
behavioral1
Sample
42f776680da60e7e036d51268b9cdd46_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42f776680da60e7e036d51268b9cdd46_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42f776680da60e7e036d51268b9cdd46_JaffaCakes118
-
Size
295KB
-
MD5
42f776680da60e7e036d51268b9cdd46
-
SHA1
e1466a48139e487ca4c850ea5908fddedc08b314
-
SHA256
63c3e1d568e7f182acf77c7919966d005ea8018bb46c58fb6edde4f6988f551f
-
SHA512
c85438373d83a4ff9abf57546bf74d824969aea4ea689cb6439ae20d00c1f07434a1073a3ef3a7827b9b1106b4fd18317820714b5c5aea825dfaaf2380e0a31b
-
SSDEEP
6144:0ZfDidk5cabmb/QyE9ItWmkH7Hbq3hs5BVvgbikYRtGldz:0Zridk5ubtWmmHbq23vmik9z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42f776680da60e7e036d51268b9cdd46_JaffaCakes118
Files
-
42f776680da60e7e036d51268b9cdd46_JaffaCakes118.exe windows:4 windows x86 arch:x86
8c6855c3ccf8c7678682df95b80c9227
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
GetProcessHeap
GetExitCodeProcess
GetExitCodeThread
DeleteAtom
DeviceIoControl
GetConsoleCP
user32
SendMessageA
Sections
beweBWPS Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
bBgkBLdK Size: 1024B - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JjeYVcdC Size: 262KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE