Static task
static1
Behavioral task
behavioral1
Sample
494f542bb3247e2f7c065d29270b8a48_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
494f542bb3247e2f7c065d29270b8a48_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
494f542bb3247e2f7c065d29270b8a48_JaffaCakes118
-
Size
1.0MB
-
MD5
494f542bb3247e2f7c065d29270b8a48
-
SHA1
06f88e3b24253bd05502661c7d64554519d7a959
-
SHA256
9b43831196c9df603339101468295a9bab89602f24a3def2c8996d64f7ad7e79
-
SHA512
2d9c4ea527464ab35dddd5d27187765ca9cd99031b34b4c2a7193b334b0e4bcc52721602504946738a8f7a823cee7f4a44582ee30be8829b817d2a8a43595f92
-
SSDEEP
24576:zZH8FPYDmg8y6ZBcH2ZEZakFEilnzrpKHdydshotTQJ:z58F0mg8yLH2dwfpwite
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 494f542bb3247e2f7c065d29270b8a48_JaffaCakes118
Files
-
494f542bb3247e2f7c065d29270b8a48_JaffaCakes118.exe windows:5 windows x86 arch:x86
35b93a58cd698b69bdb195afae2b70bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalSize
GetCommandLineW
VirtualProtectEx
GlobalLock
GetCommandLineW
GlobalUnlock
GlobalFix
user32
DrawEdge
GetDCEx
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1012KB - Virtual size: 1016KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ