Static task
static1
Behavioral task
behavioral1
Sample
49d9d40132b29d6797b7ebd44349572c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
49d9d40132b29d6797b7ebd44349572c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49d9d40132b29d6797b7ebd44349572c_JaffaCakes118
-
Size
76KB
-
MD5
49d9d40132b29d6797b7ebd44349572c
-
SHA1
01ec0718b8b2c48b770b828ed509f2396439cad3
-
SHA256
a54f18b6829a41b6a4fdbc40c8493941ef079f2eec2c7f5e1c85bd662223a516
-
SHA512
8e28e19a13fa306d44099cadce28507b88942fa0df0d4b9fe67d46d65d9b9c4cfe566601ff1b312f83cfcb28e3097ef789a9915f03ad1c8f46aea476ea9d7c4d
-
SSDEEP
1536:MEEERPkcrzXPwWYy1zoIEGAnNifepjVrs2ryrd1vUQuq6:MEbHJY/FGANifeHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49d9d40132b29d6797b7ebd44349572c_JaffaCakes118
Files
-
49d9d40132b29d6797b7ebd44349572c_JaffaCakes118.exe windows:4 windows x86 arch:x86
dfa808b8cd9bcc6f4753310bfe0880ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnWire
ValidateLocale
OpenProcess
SetFileShortNameA
Heap32First
UnregisterConsoleIME
ReadConsoleInputExW
ReadProcessMemory
LoadLibraryW
GetConsoleTitleW
ReadFileEx
GetNumaProcessorNode
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE