Static task
static1
Behavioral task
behavioral1
Sample
49b7acd5095d6c22b08ea2a9a7ff6309_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
49b7acd5095d6c22b08ea2a9a7ff6309_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
49b7acd5095d6c22b08ea2a9a7ff6309_JaffaCakes118
-
Size
637KB
-
MD5
49b7acd5095d6c22b08ea2a9a7ff6309
-
SHA1
69ad7cc1c5c784f1b44065602b02893dba1e9a0d
-
SHA256
6b547003e79ea94eb8192a4d33e13aeed014116627dfde76654d90f97e326c5c
-
SHA512
adc84bead2d8402b7d65b00268c3c9c56508c6f2d24733151ed3d3adc2fb70bee8387bcdb14283e957bf70ddf0da692d84a16bef1f8f14e252785b3c07e39be9
-
SSDEEP
12288:wzKTBwOoP9oO6ZQTjwbkJPyXpJmuIwFPzk605Aky+oklRfg1JOpA0zvZ3:soGPyRQXkkJaXrmu05Ak6MRoXyhB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49b7acd5095d6c22b08ea2a9a7ff6309_JaffaCakes118
Files
-
49b7acd5095d6c22b08ea2a9a7ff6309_JaffaCakes118.exe windows:4 windows x86 arch:x86
716ffa86138dc9ad3f3528212ace69d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetAtomNameA
GetACP
VirtualProtect
FindAtomA
HeapReAlloc
TlsFree
GlobalUnlock
TlsGetValue
GetConsoleCP
CompareFileTime
GetStdHandle
GetTickCount
CloseHandle
GetProfileIntA
GetVersion
InterlockedExchange
LoadLibraryA
GetModuleHandleA
WaitForSingleObject
lstrlenA
HeapWalk
user32
GetKeyboardLayout
LoadIconA
GetSubMenu
DispatchMessageA
PaintDesktop
PostMessageA
MessageBoxA
ModifyMenuA
CreateCaret
GetMenu
DestroyMenu
SubtractRect
InsertMenuA
PostQuitMessage
TranslateMessage
GetDlgItem
CopyRect
GetWindowTextA
EnableScrollBar
SetWindowPos
InflateRect
DialogBoxParamA
SetPropA
GetScrollRange
GetMenuStringA
ShowWindow
UpdateWindow
EqualRect
msi
MsiGetMode
MsiDoActionA
MsiCloseHandle
MsiEnumProductsA
MsiEnumClientsA
uxtheme
GetThemeBool
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ