Static task
static1
Behavioral task
behavioral1
Sample
f49785edeeea1c1823247b41c134ab81_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f49785edeeea1c1823247b41c134ab81_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f49785edeeea1c1823247b41c134ab81_JaffaCakes118
-
Size
161KB
-
MD5
f49785edeeea1c1823247b41c134ab81
-
SHA1
b0de4bfead4ba1cd9622c6ac701c4ca4f9dbdab6
-
SHA256
6da2d23594cf2496f23502c29e8873f5de176d37f9aa45e4c9aed083f227c90a
-
SHA512
c1bca57e02adb76d39a88185c6e6a6d6155f13286360b6ce2b7f72a1e92e9c5e25cfdf1f529460b38f392e4a2e5146379cf5df5595258d2f5e1c1ca66bed1a9b
-
SSDEEP
3072:e5kAv2nXKnwOFdKvW/vORcdjkpuJZ9i7fYQeRwQao90YA3ZOmnwjWNYfBoyc:e5h2nXywud5vw+jk89ijYQeR8oSYWOQp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f49785edeeea1c1823247b41c134ab81_JaffaCakes118
Files
-
f49785edeeea1c1823247b41c134ab81_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 155KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE