Static task
static1
Behavioral task
behavioral1
Sample
420d5f0fd87f1470afb2b957ccddc491_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
420d5f0fd87f1470afb2b957ccddc491_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
420d5f0fd87f1470afb2b957ccddc491_JaffaCakes118
-
Size
76KB
-
MD5
420d5f0fd87f1470afb2b957ccddc491
-
SHA1
0cbe7de0bc93cf7051a99eae68fc4044dc101626
-
SHA256
be4232f75ff086b5a1ca26561138932f9d62c3c549f59a783ab90037e2c1e355
-
SHA512
672b96b475b03c9ddcc81f9c2c9daaadee62c9d41be2f2525601860ac1026c8cff7aae700d8486354a82bdd9c656ae3693b8c9bebcc537d75d84d8437c960b5e
-
SSDEEP
1536:RFk/8iTynftBgoxR84N6YDDTLzPc9g0fm1rtNGMj6ipjVrs2ryrd1vUQuq6:vY8OGftCoxRNNtfcPfwGjiHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 420d5f0fd87f1470afb2b957ccddc491_JaffaCakes118
Files
-
420d5f0fd87f1470afb2b957ccddc491_JaffaCakes118.exe windows:4 windows x86 arch:x86
44ca9092b65e189fc04e7302fc17451c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemWindowsDirectoryA
RestoreLastError
SystemTimeToFileTime
GlobalFree
DosPathToSessionPathW
SetLocalTime
lstrcatA
GetTapeStatus
VerLanguageNameW
GetConsoleInputExeNameW
WriteConsoleA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE