Static task
static1
Behavioral task
behavioral1
Sample
049caf11a6a610d34aa379100e38b3a9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
049caf11a6a610d34aa379100e38b3a9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
049caf11a6a610d34aa379100e38b3a9_JaffaCakes118
-
Size
297KB
-
MD5
049caf11a6a610d34aa379100e38b3a9
-
SHA1
7b4eb2d0f2c84073e3ddcd637aa29e02c40293ab
-
SHA256
d5539b008cb2971763ed1a8b3043c21de21fcedc72eddc5ccbe5297648884195
-
SHA512
0f49563d11c1ec42462c0c699c29d6d119221c8402b2e4fc7bbed8f22545ec9a980e2ba7546ac0291606c9aa498a0dea3d26c05545784ccbd1b6d5a2ce14f51f
-
SSDEEP
6144:8uG9Xt0fEzpZx5vv5+VVujE3o3u0+a6RnVg8qdvrOq:B0t0GZQVVwE3o7+aCVg8Cv7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 049caf11a6a610d34aa379100e38b3a9_JaffaCakes118
Files
-
049caf11a6a610d34aa379100e38b3a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 295KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE