Static task
static1
Behavioral task
behavioral1
Sample
42a70bba03e94f96d5b9007f6c882d2d_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
42a70bba03e94f96d5b9007f6c882d2d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
42a70bba03e94f96d5b9007f6c882d2d_JaffaCakes118
-
Size
434KB
-
MD5
42a70bba03e94f96d5b9007f6c882d2d
-
SHA1
7322f1cc99733056acc00e20dccb73b9be4c9246
-
SHA256
0643ef6dd162de2ed3ea2c57f02d08c3febaa7dbc943db29cd624dfd15c8c422
-
SHA512
d4aa155dd5354b1aff24a80b777a11e71c0780f9a3140996ff047d1e3c63f99363347c31c1fe990b4eddc23fb4d6e1bf399c958c45f7d7cfc2348a64595509c9
-
SSDEEP
6144:D19h0JPwpeXBqbAWuc6eG7hncDoh+ie0BVEow9WeNw7mtxqKTbMNJlGkHxNvM9pt:DbdD1W7NctsSWeN8mtxjTbMvM9bo25
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42a70bba03e94f96d5b9007f6c882d2d_JaffaCakes118
Files
-
42a70bba03e94f96d5b9007f6c882d2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
b8705e6567269feb3023c43040c083e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
TlsFree
TlsSetValue
GetFileType
GetProcAddress
UnhandledExceptionFilter
HeapReAlloc
VirtualProtect
GetLastError
IsValidLocale
GetCurrentProcessId
HeapAlloc
GetCommandLineA
GetTimeZoneInformation
LCMapStringA
GetModuleHandleA
VirtualFree
EnumSystemCodePagesW
EnumSystemLocalesA
InterlockedExchange
HeapCreate
SetHandleCount
GetLocaleInfoW
SetEnvironmentVariableA
WideCharToMultiByte
GetCPInfo
IsBadWritePtr
FreeEnvironmentStringsW
CreateDirectoryA
ExitProcess
GetTickCount
FreeEnvironmentStringsA
SetLastError
HeapFree
GetStringTypeA
GetModuleFileNameA
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
GetStdHandle
VirtualAlloc
CompareStringW
GetLocaleInfoA
VirtualQuery
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
GetStringTypeW
GetUserDefaultLCID
HeapSize
IsValidCodePage
EnterCriticalSection
TlsGetValue
GetOEMCP
GetSystemTimeAsFileTime
GetSystemInfo
GetEnvironmentStrings
CompareStringA
GetTimeFormatA
GetVersionExA
GetDateFormatA
DeleteCriticalSection
WriteFile
MultiByteToWideChar
GetCurrentThread
HeapDestroy
GetStartupInfoA
GetACP
TlsAlloc
GetEnvironmentStringsW
InitializeCriticalSection
gdi32
GetCharABCWidthsFloatA
GetMetaFileW
SetAbortProc
GetStretchBltMode
GetTextCharset
SetLayout
GetCharABCWidthsFloatW
MoveToEx
CreateDIBPatternBrushPt
GetEnhMetaFileBits
RestoreDC
GetDCOrgEx
GetDIBColorTable
PolyPolyline
ModifyWorldTransform
GetPixelFormat
CreateRectRgn
CloseFigure
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 277KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ