Static task
static1
Behavioral task
behavioral1
Sample
cd49c236fd037defc033df70cd6b4aef_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cd49c236fd037defc033df70cd6b4aef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cd49c236fd037defc033df70cd6b4aef_JaffaCakes118
-
Size
2.7MB
-
MD5
cd49c236fd037defc033df70cd6b4aef
-
SHA1
a434f203fd96b99e905a38be5d1c20e82f8f702d
-
SHA256
ae7b146a03192b06b7d2b66e5762e13fb8b31b202f4e11ba3d185b5adc127a91
-
SHA512
969f0e4ed71abffc49540afe8cfe1de6aba3e96707f725d75ad4fcc1fab46755ffcfb20789c3244476f6c7150049dc25128927b7d4996c25ce1089b5baa060c3
-
SSDEEP
49152:4fksSFaH+MDjSqukDsCMDSLce3xUhe0o+XPE4yTZD1xC0FVNQZ4vIYmKwAke2yEw:OvmanQCMDSLc8xUhumEnlbFViZ4QzAkU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd49c236fd037defc033df70cd6b4aef_JaffaCakes118
Files
-
cd49c236fd037defc033df70cd6b4aef_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 319KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qlorrabu Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nvpfpuwv Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE