Static task
static1
Behavioral task
behavioral1
Sample
49174942b10fa0d1cc15a214311d2403_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49174942b10fa0d1cc15a214311d2403_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49174942b10fa0d1cc15a214311d2403_JaffaCakes118
-
Size
332KB
-
MD5
49174942b10fa0d1cc15a214311d2403
-
SHA1
082388d7949faf86897bc2ae4b5e8d9efa45f6f5
-
SHA256
d92caf2b89f8c19e217da55febcf3bf1ee6d0d6d92973cfdb1589aa06376a8d0
-
SHA512
d32900456628af3fff2889487c7c7fcf60e51264897b68ff8f65f8aa39562e3fa1cfc9b1101d9d80429a79769a129690a530d6ff57f88adfe6542e5f5f72d322
-
SSDEEP
6144:r7OY28awmcLVVi8MR3WuRAzmwam8KvZxuBbHgGFz/M9RBVGvJ1WbuSXhnw:r7jmcLVV5ewcmNhAZvcOvJ1uhw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49174942b10fa0d1cc15a214311d2403_JaffaCakes118
Files
-
49174942b10fa0d1cc15a214311d2403_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�a� 0 Size: - Virtual size: 1004KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�a� 1 Size: 331KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�a� 2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE