Static task
static1
Behavioral task
behavioral1
Sample
0849e1280bc492a5125e8b91498b59cd_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0849e1280bc492a5125e8b91498b59cd_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0849e1280bc492a5125e8b91498b59cd_JaffaCakes118
-
Size
133KB
-
MD5
0849e1280bc492a5125e8b91498b59cd
-
SHA1
beeca1a0691223fd898a6bee95958792ad43fcb6
-
SHA256
0fe58f7d1642489244d372538d3eefc625f58bb39b9f5a711c25243b63311105
-
SHA512
d847c4a2669996e6afe972dcd8bac793164fd3e75d9c1ee60d137f82ec4507f6fd6b8e2e0854e7914a1623b5cf08208984b8a9644dbaf1e1c1051d48236e4c51
-
SSDEEP
3072:hyzhQZ//QBNlFoFn4Yo4/PJLrp0cQ7QAINqPDHQnc:hy9QRwXYo4pLO7QAIS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0849e1280bc492a5125e8b91498b59cd_JaffaCakes118
Files
-
0849e1280bc492a5125e8b91498b59cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
kcej20 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kcej21 Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kcej22 Size: 137B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE