Static task
static1
Behavioral task
behavioral1
Sample
49233959cd0dffc71cd7122fa78ca8af_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
49233959cd0dffc71cd7122fa78ca8af_JaffaCakes118
-
Size
864KB
-
MD5
49233959cd0dffc71cd7122fa78ca8af
-
SHA1
1593e63e202e4cd36e5c4922b4b665b9018dc820
-
SHA256
42efc7df5c7fd042091bdba1385a13facb0e776764740e455db6a622ffd3f841
-
SHA512
b3940eef47227e0f076ea8a55284995372208f689f4dcdb538bc3aab812376f5239798b0b45a2be46e302e6879bb32aedeff89690ed0fb7888e51e3f05ecd4f6
-
SSDEEP
12288:4X+ftNo5zUO3/E8hYAKGQ9iB2iTMqrx7mMPScqVFdWarj/QJB3OF7gT757Z7ip:nftN1H8hYGakp5hWVPWrJEF7gL7ip
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49233959cd0dffc71cd7122fa78ca8af_JaffaCakes118
Files
-
49233959cd0dffc71cd7122fa78ca8af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 52KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 796KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE