Static task
static1
Behavioral task
behavioral1
Sample
49d664736e534d9796053f529a68c604_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
49d664736e534d9796053f529a68c604_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49d664736e534d9796053f529a68c604_JaffaCakes118
-
Size
30KB
-
MD5
49d664736e534d9796053f529a68c604
-
SHA1
d00b0dc2aed3a3e8b9166047853f094a32882e4f
-
SHA256
fa446c5644f5683a591d96138c36ff7cde463f7686c508072644242e6533caa8
-
SHA512
f045dc9ee38e589cf4424b3acac583ae51c2838ccbb675cb173855677a09b90ff842bd949a3d9620aa202ea9428cee68b8065830b7e5d4b297296e71587c6c89
-
SSDEEP
192:GcGULHsxV6GrHAwP9Wl6jRLcZfUpf4KF5/sESGQ:GcGUmEGcULCfKb+GQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49d664736e534d9796053f529a68c604_JaffaCakes118
Files
-
49d664736e534d9796053f529a68c604_JaffaCakes118.exe windows:4 windows x86 arch:x86
85773a17eac8d4a521b00d2cca9b9ac3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ