Static task
static1
Behavioral task
behavioral1
Sample
d49ba94a9cb6757c97932f20ed05dd78_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d49ba94a9cb6757c97932f20ed05dd78_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
d49ba94a9cb6757c97932f20ed05dd78_JaffaCakes118
-
Size
707KB
-
MD5
d49ba94a9cb6757c97932f20ed05dd78
-
SHA1
cd43c2f86909e20fd1034539d75a085970e5c783
-
SHA256
2a83a1f9e7b7fb5ce2eb7306ac18d169e5e86226920b55b4d7e55c084a2547f1
-
SHA512
ab72099a17c7731b7c932a2f71275e870c0b723e7457b270983f711cdb287aa3db9d00fd72edd7efc8ccc9f35b0d3066cc4e0c50f6d81df1745ff914c4cb5cf1
-
SSDEEP
6144:bhYsafa0idunTIPDan9xTy2VTk0xfdI3QPTYiEYKB6eTBh+:bWlfiunTIe9hTk0xlI30TYUHeT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d49ba94a9cb6757c97932f20ed05dd78_JaffaCakes118
Files
-
d49ba94a9cb6757c97932f20ed05dd78_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 352KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ