Static task
static1
Behavioral task
behavioral1
Sample
42fa740d1352ba5cc5e1ed120b62d158_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42fa740d1352ba5cc5e1ed120b62d158_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42fa740d1352ba5cc5e1ed120b62d158_JaffaCakes118
-
Size
244KB
-
MD5
42fa740d1352ba5cc5e1ed120b62d158
-
SHA1
82bd0fb68663de7a20bbb8979bf11c9f6d9daa65
-
SHA256
75a29e3b18af131b96963038e4cd3e17c2e741b3be1f0d34c6edac9810e138e6
-
SHA512
2b697e95e1823857a23e019d86b30aa5b7187f07aa79038da15e234b7d362e3469d7bbc17b53f03a9ad77b804530e0433fbfa9a9f67b81f3c41eb02766ece46a
-
SSDEEP
6144:+Zn506cKIoKNHtjZc9i7CLRY11r82ZnDkGrwThxg2+9knLy9sGUXDFV:+Z5KoKjdcIGtCTDjwd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42fa740d1352ba5cc5e1ed120b62d158_JaffaCakes118
Files
-
42fa740d1352ba5cc5e1ed120b62d158_JaffaCakes118.exe windows:4 windows x86 arch:x86
54712709d5a54fb0fac2f8d62f05e9fd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CreateDirectoryExA
CreateNamedPipeW
CreateTapePartition
DeleteCriticalSection
EndUpdateResourceA
ExitProcess
GenerateConsoleCtrlEvent
GetCurrentProcessId
GetFileSize
GetMailslotInfo
GetPrivateProfileSectionA
GetStringTypeExA
GetSystemTimeAdjustment
GetThreadContext
GetThreadSelectorEntry
IsBadHugeWritePtr
LocalFileTimeToFileTime
MoveFileExW
PrepareTape
ResumeThread
RtlZeroMemory
SetMessageWaitingIndicator
SignalObjectAndWait
WriteConsoleOutputCharacterW
user32
CreateIconIndirect
DefMDIChildProcW
DestroyMenu
DestroyWindow
DrawCaptionTempA
DrawFrame
EnumDesktopsA
EnumDisplayDevicesW
EnumDisplaySettingsExA
EnumDisplaySettingsExW
GetDCEx
GetDlgItemInt
GetFocus
GetTopWindow
HiliteMenuItem
InSendMessage
IsCharUpperA
LoadKeyboardLayoutW
LoadStringW
OpenInputDesktop
RealChildWindowFromPoint
RemoveMenu
ReuseDDElParam
SetRectEmpty
SetTimer
SetWindowsHookExA
UnregisterHotKey
VkKeyScanExA
gdi32
BeginPath
BitBlt
CloseEnhMetaFile
CreateDiscardableBitmap
CreateHatchBrush
CreateICA
CreatePenIndirect
DPtoLP
EnableEUDC
EnumFontsA
EqualRgn
FillRgn
GetCharABCWidthsW
GetDIBits
GetGlyphOutlineA
GetObjectA
GetOutlineTextMetricsA
GetRasterizerCaps
GetSystemPaletteUse
MoveToEx
PlayEnhMetaFile
PlgBlt
SetTextColor
SetWindowExtEx
StrokePath
WidenPath
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 223KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ