Static task
static1
Behavioral task
behavioral1
Sample
549ad3e14d8505dd0c49efd2d1778015_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
549ad3e14d8505dd0c49efd2d1778015_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
549ad3e14d8505dd0c49efd2d1778015_JaffaCakes118
-
Size
347KB
-
MD5
549ad3e14d8505dd0c49efd2d1778015
-
SHA1
1c5abea0d383b8001cd51da2b205ec8cac54cfd0
-
SHA256
cebf11bcf3b0457c5e3f6b96f8a193991ba34b211d25eacd63cf9c2afeb578aa
-
SHA512
82ebdd4ea43a411e8210d0029c4f6fe10ea8542720e9ae7868a549ec8ec40ea5fc50f80f8f049862e014bdd2f1be838c2290c9df2d815e36579bedfa2419040c
-
SSDEEP
6144:LvHs31VBjMluDUrSkkoV7VphG07eLJJUbMq92JHYNa/zrGprew:LvMlVpDUrV3V7VpEqe1mJ8JHu+x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 549ad3e14d8505dd0c49efd2d1778015_JaffaCakes118
Files
-
549ad3e14d8505dd0c49efd2d1778015_JaffaCakes118.exe windows:5 windows x86 arch:x86
33c7038a9679e09a03932f501ea0177c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
BeginPaint
GetWindowTextA
DialogBoxParamA
CopyIcon
CreateIcon
LoadMenuA
DialogBoxParamW
EndDialog
CopyRect
AppendMenuW
kernel32
ExitProcess
GetLastError
advapi32
RegDeleteKeyA
RegQueryValueExA
RegQueryValueW
RegOpenKeyExA
RegCreateKeyExW
RegDeleteKeyW
RegGetKeySecurity
RegCreateKeyW
RegFlushKey
Sections
.mnbj Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.icoje Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajkpc Size: 306KB - Virtual size: 681KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dcod Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ