Static task
static1
Behavioral task
behavioral1
Sample
49541c43a2368eea84a0e502cf0ae268_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
49541c43a2368eea84a0e502cf0ae268_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
49541c43a2368eea84a0e502cf0ae268_JaffaCakes118
-
Size
385KB
-
MD5
49541c43a2368eea84a0e502cf0ae268
-
SHA1
9798e928cabc892eaf3637974b29aea7d2baa57a
-
SHA256
69cd260be0e4df49f0bb8c74c50de9f0b696c8660b9d44d6bc918ea835543a62
-
SHA512
ad987a4c053e13d37de3fc391774bfefcd4895c450f82e12f99fa03a4afb1a0cd30d26bfad5858667410b31031a612be5374b45fa35f6edb6cf3759bfd405be5
-
SSDEEP
6144:bJt/Lo9quktf6BWWaTRXCgYTul00DF/SNhol8oBeUi6H4FMtrJygqZ+h:l5GquktyolXnhl0I/AamMtrsxMh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49541c43a2368eea84a0e502cf0ae268_JaffaCakes118
Files
-
49541c43a2368eea84a0e502cf0ae268_JaffaCakes118.exe windows:5 windows x86 arch:x86
5152ae5655381d7ec3cf0cfbff896ac8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalFree
CloseHandle
DeleteFileW
HeapAlloc
SetConsoleMode
advapi32
RegOpenKeyExW
GetPrivateObjectSecurity
IsTextUnicode
Sections
.hkt Size: 38KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zmvij Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xkxmn Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ