Static task
static1
Behavioral task
behavioral1
Sample
423b7a777c20d53b91e96b8fadffbbd2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
423b7a777c20d53b91e96b8fadffbbd2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
423b7a777c20d53b91e96b8fadffbbd2_JaffaCakes118
-
Size
115KB
-
MD5
423b7a777c20d53b91e96b8fadffbbd2
-
SHA1
2d4a76122e2ab4cf7442568bd8d1c431e467fee5
-
SHA256
e32bd69b122760460d09160e18ab598c7b670949005da65653cb0353a13d78c7
-
SHA512
f189d40b41abf8ddfd139380243e371d8da8eabf7a799fd23d99c162e1b360ce2c04babab39dc92c4dc79f94901ab62852e6bd23fd8a3f4f66de4e855ce33e3b
-
SSDEEP
3072:4HCzPhQnaui6NRo7lw8CWL1vm1ya7i+3pCOw7:0CzJUlNRo7TxvxuTCOC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 423b7a777c20d53b91e96b8fadffbbd2_JaffaCakes118
Files
-
423b7a777c20d53b91e96b8fadffbbd2_JaffaCakes118.exe windows:4 windows x86 arch:x86
5b7b9a06f3a80c161397be7bece2af21
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetCurrentThread
LoadLibraryA
LocalAlloc
GetProcAddress
GetModuleHandleA
GetCurrentDirectoryA
GetVersionExA
CloseHandle
GetSystemInfo
LocalFree
user32
EndPaint
CharNextA
GetFocus
DispatchMessageA
TranslateMessage
GetMessageA
BeginPaint
advapi32
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ