Static task
static1
Behavioral task
behavioral1
Sample
49d2f8e881d0b2112c5f3df1d2a2e99b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
49d2f8e881d0b2112c5f3df1d2a2e99b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49d2f8e881d0b2112c5f3df1d2a2e99b_JaffaCakes118
-
Size
60KB
-
MD5
49d2f8e881d0b2112c5f3df1d2a2e99b
-
SHA1
a9ada01ea083c3b2b053d0d0c207c5a820ac8080
-
SHA256
a8f2261d9b82de01866daf038e304a386a1b85c239afbc5c2e5ad03aecec15f2
-
SHA512
9e08d2f7c03079c7deccb62b5a504c8774ae61b255f5cb4036003aa5ec2ecabb1492d513ccfaf4c0c5fad50fced14b68a1bcf93c878cd23edb27de9d535f10aa
-
SSDEEP
1536:1Y2R5i+37a3Br2vm2H83dOqzWUQ1jFZam9delL7ywx3GoVifsJzHZyZRZ:1BL323Br2vY3dhzncXt9devWoVifsR4P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49d2f8e881d0b2112c5f3df1d2a2e99b_JaffaCakes118
Files
-
49d2f8e881d0b2112c5f3df1d2a2e99b_JaffaCakes118.exe windows:4 windows x86 arch:x86
52add9e9eabdaac9403470f1f0fad0d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyImage
LoadMenuA
CopyIcon
CloseWindow
DialogBoxParamW
GetMenu
CopyRect
IsMenu
DialogBoxParamA
GetCursor
DrawTextW
EndDialog
DrawTextA
GetFocus
CreateIcon
GetDlgItem
GetWindowTextLengthA
DrawIconEx
GetWindowTextA
DrawIcon
LoadCursorA
kernel32
GetACP
GetCommandLineA
GetVersion
WriteFile
lstrcpynA
lstrcpynW
lstrcatA
LCMapStringW
GetCurrentProcess
SetHandleCount
TerminateProcess
GetStringTypeA
CreateFileA
GetFileType
GetStringTypeW
MultiByteToWideChar
SetFilePointer
GetCPInfo
GetModuleFileNameA
lstrcpyA
GetStdHandle
GetOEMCP
LCMapStringA
GetStartupInfoA
comctl32
DllGetVersion
ImageList_Destroy
ImageList_Draw
CreateMappedBitmap
InitCommonControls
ImageList_Create
CreateStatusWindow
CreateUpDownControl
CreateToolbar
ImageList_GetIconSize
ImageList_AddIcon
MenuHelp
ImageList_Copy
ImageList_EndDrag
ImageList_DragEnter
ImageList_LoadImageA
CreateStatusWindowW
ImageList_LoadImageW
ImageList_Add
DrawStatusText
CreateToolbarEx
DrawStatusTextW
gdi32
CreateBrushIndirect
CreatePalette
GetBitmapBits
GetCurrentPositionEx
CreateBitmap
CreatePenIndirect
ExtTextOutA
RestoreDC
CreateCompatibleBitmap
GetPixel
CreateSolidBrush
GetDCOrgEx
SetTextColor
GetClipBox
DeleteDC
CreateFontIndirectA
DeleteObject
GetBrushOrgEx
CreateHalftonePalette
CreateCompatibleDC
CreateDIBSection
advapi32
RegEnumKeyA
RegOpenKeyExW
RegCreateKeyExA
RegQueryValueW
RegCreateKeyW
RegSetValueA
RegDeleteValueA
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
RegQueryValueExW
RegDeleteValueW
RegEnumValueA
RegOpenKeyW
RegEnumValueW
RegEnumKeyW
RegSetValueW
RegCreateKeyA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ