Static task
static1
Behavioral task
behavioral1
Sample
549fd5499aa78fd78ae3c65a76688036_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
549fd5499aa78fd78ae3c65a76688036_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
549fd5499aa78fd78ae3c65a76688036_JaffaCakes118
-
Size
131KB
-
MD5
549fd5499aa78fd78ae3c65a76688036
-
SHA1
36b2885bba23b71bc390f454d4861d7bcb4f94e1
-
SHA256
d2878e4ea39c2dbadd746e1113efab604683386b62c1af5a200c0d4a36a6d1ec
-
SHA512
283ad40cf9b8a8e825a16a3042bf61cfd04e15a99a9caf2e802db1222d582b00157b15edd04f554622e63cee92785fb1701e7bad0dbe3e9bce4d62bbc2716b46
-
SSDEEP
3072:zixbCoLI/t83XlqsK3nR+UY2jG9s91oZGU1gdGLjKM8:OxPLOt2leROmGi91m8GLjA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 549fd5499aa78fd78ae3c65a76688036_JaffaCakes118
Files
-
549fd5499aa78fd78ae3c65a76688036_JaffaCakes118.exe windows:4 windows x86 arch:x86
99d30451444fc21b7a64b1c6c3e23d91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumCalendarInfoA
ExitProcess
GetCPInfo
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetUserDefaultLangID
GlobalFree
GlobalLock
HeapReAlloc
IsDebuggerPresent
LoadLibraryA
ResumeThread
SetCurrentDirectoryA
VirtualAlloc
VirtualFree
WideCharToMultiByte
user32
CallWindowProcA
DestroyWindow
DispatchMessageA
EnableWindow
EndPaint
GetDlgItem
GetSysColor
MessageBoxA
SendMessageA
UpdateWindow
gdi32
GetBitmapBits
GetDIBColorTable
PatBlt
RestoreDC
SetROP2
SetViewportOrgEx
shell32
DragQueryFileW
ExtractIconExA
SHAddToRecentDocs
SHAppBarMessage
SHGetDesktopFolder
SHGetFileInfo
SHGetPathFromIDList
SHGetSpecialFolderLocation
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ