Static task
static1
Behavioral task
behavioral1
Sample
a49d14020b40f309162d75c6b96c68aa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a49d14020b40f309162d75c6b96c68aa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a49d14020b40f309162d75c6b96c68aa_JaffaCakes118
-
Size
32KB
-
MD5
a49d14020b40f309162d75c6b96c68aa
-
SHA1
d01e043bf9111d959a0dce6ff3addda82d1a753d
-
SHA256
b105e95c07198afd80c74efea4c8f30a508d3e2a67ea2cbfaac81b42252b3fe7
-
SHA512
c81f30143c335557ba34f6ae243527e814a24879b0d29f1fee3c39016b7275577ab3dbb360bdb0c478d280c3d405c73d0ad26a60ea99400a16f954529ca387ca
-
SSDEEP
384:aWpNClkw3MhKiWqH4bxhvwODEljv88VANnZQXLcZK7+BtfTtPRruMlY73VUxXiL+:pvO5GH4b/vY4CitfTA5UULkvOSp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a49d14020b40f309162d75c6b96c68aa_JaffaCakes118
Files
-
a49d14020b40f309162d75c6b96c68aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d416f8ffcd149757d57b365aed3031f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleKeyboardLayoutNameW
GetVersionExW
GlobalFindAtomW
SearchPathA
GetConsoleAliasExesLengthA
GetConsoleInputExeNameA
GetStringTypeExW
SetFileAttributesW
GetModuleFileNameA
WriteConsoleOutputA
FreeEnvironmentStringsA
user32
LoadMenuIndirectA
GetClassLongA
RegisterClipboardFormatA
SendNotifyMessageA
PostMessageW
EnumDisplaySettingsExW
GetWindowLongA
GetMonitorInfoW
gdi32
LineDDA
AddFontResourceExW
RemoveFontResourceW
Sections
.rdata Size: 27KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ