Static task
static1
Behavioral task
behavioral1
Sample
491f74c8049ae40c9510148489f29d95_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
491f74c8049ae40c9510148489f29d95_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
491f74c8049ae40c9510148489f29d95_JaffaCakes118
-
Size
203KB
-
MD5
491f74c8049ae40c9510148489f29d95
-
SHA1
1110b111b44aa2d7fd78f2de315d3f190803a63a
-
SHA256
a4140150f23ed40f463c8760a182b269bd32c98b297a43bdd7f0570344a8aeaa
-
SHA512
92a972a03f9634821d51b5cdbae4558a7ba7b013557d075f6c041fcdff52bffe8ca0701a1ec3b56aeca914b0fb13fcdaf62db9a87df8f9a5f621d8416ae5a09b
-
SSDEEP
3072:MRAhhcsxgAJuK7bZD01GoI0ON27Usy3/ROzTUF//OCxMJwVUefaGvMSiHUUt/Z:MRAhhJxX7bNIAROzTsFC2K30sh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 491f74c8049ae40c9510148489f29d95_JaffaCakes118
Files
-
491f74c8049ae40c9510148489f29d95_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE