Static task
static1
Behavioral task
behavioral1
Sample
42fc3ac68a71fe43819acbba03111a6d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42fc3ac68a71fe43819acbba03111a6d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42fc3ac68a71fe43819acbba03111a6d_JaffaCakes118
-
Size
7.0MB
-
MD5
42fc3ac68a71fe43819acbba03111a6d
-
SHA1
f34fc1d292db328dc8e95606ae0cc28ecf1c5bee
-
SHA256
9fc4b9fce8ae8f179f986f408463e27e7cc7d039621f9e3884b98423bb29dcc6
-
SHA512
f0e89dd7e059b2994a45cc8bfb02d7c440b3bdc5a02430de1b0927bf2059e63c7796b1394e9262b5a091fb5701f994ede5b7e2d69bb84f20a8270f2f5e2de59c
-
SSDEEP
196608:0Od6DUSrygzjvKOfdpkNmq/sx/v0M3qUMGdP6Es7D:0pDUqyo7bfIAb3qUMGdyh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42fc3ac68a71fe43819acbba03111a6d_JaffaCakes118
Files
-
42fc3ac68a71fe43819acbba03111a6d_JaffaCakes118.exe windows:5 windows x86 arch:x86
ffcbf43172867285c8b4108d599d5070
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
MessageBoxA
kernel32
lstrcmpiA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
mpr
WNetOpenEnumW
ole32
CreateILockBytesOnHGlobal
comctl32
InitializeFlatSB
wininet
InternetSetStatusCallback
shell32
ShellExecuteW
comdlg32
ReplaceTextW
winspool.drv
OpenPrinterW
wsock32
WSACleanup
oledlg
OleUIObjectPropertiesW
Sections
.text Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 606KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: - Virtual size: 806B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 64B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.vmp2 Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ