he#@1.Pdb
Static task
static1
Behavioral task
behavioral1
Sample
49c2629c0ed95f6f9bc36b244f8872a0_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
49c2629c0ed95f6f9bc36b244f8872a0_JaffaCakes118
-
Size
1.0MB
-
MD5
49c2629c0ed95f6f9bc36b244f8872a0
-
SHA1
02d75c0499e57b6577b9eeb9c47cec8b2f022b4f
-
SHA256
4f76e48778c0f46e36edab97446d6b8d6ad794a8443c3cc9201b8bdbb431f871
-
SHA512
87754a31bef211b3b71bea6b5157e06fa8a56dfc55fb0f216f525bed1a6d39150802aa32272fd687ade40ef600be42d9f66139f25cce9585374f34924b7509c9
-
SSDEEP
6144:hz2mnrzwa+/cOyBk1jklgJFfBBIUpY10nW:hz2mnEBh1pBI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49c2629c0ed95f6f9bc36b244f8872a0_JaffaCakes118
Files
-
49c2629c0ed95f6f9bc36b244f8872a0_JaffaCakes118.exe windows:5 windows x86 arch:x86
a314d1e8eba0612f49ec5bfb8d6837f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetModuleHandleA
VirtualAlloc
GetCurrentDirectoryA
GetShortPathNameW
GetUserDefaultLCID
SetConsoleCursorInfo
advapi32
EnumServicesStatusA
gdi32
GetTextCharsetInfo
GetWindowExtEx
DeleteObject
MoveToEx
user32
GetComboBoxInfo
IsChild
RegisterRawInputDevices
UserHandleGrantAccess
CreateCaret
GetDlgCtrlID
Sections
.text Size: 768KB - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 642B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.crt0 Size: 240KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ