Static task
static1
Behavioral task
behavioral1
Sample
490fc8c16abcf46adc149f838a211a47_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
490fc8c16abcf46adc149f838a211a47_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
490fc8c16abcf46adc149f838a211a47_JaffaCakes118
-
Size
739KB
-
MD5
490fc8c16abcf46adc149f838a211a47
-
SHA1
fad188d9da6bf6e69477fb93fafc483fe742c7e8
-
SHA256
9ee7bd04b5d5e82bfb7240a690718b3d47c3c88954feafd6b5e52e8f6b1a922a
-
SHA512
5ef2315b11543f293f20aeda686acbd3450b0f78109bcc9378453a7660411ff6f3f2688e068cf347d30febeb654971e2a6db582ffd18ccf93695c3e0e400f1a9
-
SSDEEP
12288:s56HfNRBKU6sBSnTQi07lc0h96CX5Vs1Hn2oFeccKgvjl5c3T1rDG78EvZVJI:sAF89T107lvh80f6NecMvR23BrDoZVW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 490fc8c16abcf46adc149f838a211a47_JaffaCakes118
Files
-
490fc8c16abcf46adc149f838a211a47_JaffaCakes118.exe windows:4 windows x86 arch:x86
5467b5e2c4aa3bf02040ed799e635990
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DuplicateHandle
Sections
Size: 49KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 868KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ikpksvuw Size: 665KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jryjnfri Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE