Static task
static1
Behavioral task
behavioral1
Sample
049aefcddbee6ed23faa295518eab112_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
049aefcddbee6ed23faa295518eab112_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
049aefcddbee6ed23faa295518eab112_JaffaCakes118
-
Size
337KB
-
MD5
049aefcddbee6ed23faa295518eab112
-
SHA1
93671d0a1d197454d40bdb9df776adfec82c9c81
-
SHA256
962e746a9fd3ca760b2ace39926e5712054cd744a506dbf5b926b70bf62177c8
-
SHA512
7564b0d2fef5c2a19a3b68bc08f40b08301292752abcaec3c01e6f6bd1b9cc1038cfa79e50b4029c7a3b453f21901d3d15226687ed937c0468f49204c01243ac
-
SSDEEP
6144:mrnnHcOJllvaNiBhmboEYuapsnKYIDJHxihHFbB5nFhOxB7G0ff0:m7nlJ6N8hEYuIs/WAHfpA7fk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 049aefcddbee6ed23faa295518eab112_JaffaCakes118
Files
-
049aefcddbee6ed23faa295518eab112_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
VtMW Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VtMW Size: 330KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE