Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_48b47d2a8c639a43bcd5a8d59354a3bb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_48b47d2a8c639a43bcd5a8d59354a3bb.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_48b47d2a8c639a43bcd5a8d59354a3bb
-
Size
178KB
-
MD5
48b47d2a8c639a43bcd5a8d59354a3bb
-
SHA1
ac982fa715c0c0413232c8bb9528e1e2cc023fb1
-
SHA256
600318101dd03ac2e5bc7849966ad6db1173cc729269e3e787f9891e292f878f
-
SHA512
caeba0d4c710f9cee18403a938d79fc5f7bc6b0be0bf9155fe27149c8de1424eb505cadf0d01d1b8f5a3d2857f7cc4f47a0cceb655343b290b3ed2e244809422
-
SSDEEP
3072:PVOac/87f+NybvE0w1iCnN80uAzcaB08V8ek/XJenvsu+tRFutNMG6t72mhrscJ:P77foMEVZNGAzcaBd6x1tRFyNA20scJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_48b47d2a8c639a43bcd5a8d59354a3bb
Files
-
JaffaCakes118_48b47d2a8c639a43bcd5a8d59354a3bb.exe windows:4 windows x86 arch:x86
1ac26428251a6231414ce671d635ffef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
kernel32
GetConsoleCP
UnmapViewOfFile
GetCalendarInfoA
CreateFileA
GetVersionExA
TlsSetValue
SetLastError
GetTempPathW
WaitForSingleObject
CreateFileMappingA
TlsAlloc
WriteConsoleW
ExitProcess
GetVersionExW
InterlockedIncrement
GetModuleHandleA
MoveFileExW
GetProcessHeap
MapViewOfFile
CreateFileW
LoadLibraryExW
CreateThread
EnumResourceNamesA
SetEvent
GetEnvironmentVariableW
TlsFree
TlsGetValue
CreateProcessW
HeapFree
FindFirstFileW
CreateDirectoryW
GetModuleHandleW
FlushFileBuffers
GetConsoleMode
GetExitCodeProcess
HeapAlloc
GetProcAddress
GetLastError
ole32
CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ