Static task
static1
Behavioral task
behavioral1
Sample
49532490a41a95079e0b83196ed1b7b5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
49532490a41a95079e0b83196ed1b7b5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49532490a41a95079e0b83196ed1b7b5_JaffaCakes118
-
Size
16KB
-
MD5
49532490a41a95079e0b83196ed1b7b5
-
SHA1
406136e6a7a36a521c7b867b4efd1a5b5b39bb7c
-
SHA256
7885d76abcd577b31c5e761f328ba13c88e43cce6b5ee8d1b6305f50136f33c5
-
SHA512
f26c1b66131d81203b1bd673b0e575ab4c9d60d6dd6d8f5f6f6b0506267a9bf49f8deb9c8bdf1b86f5756cb5045272a2e13bf89e53d24c170ab4f42c8b6fb826
-
SSDEEP
384:a5EcMt1nLXe4m30+/GY+WMiJoOEICOGGp9brW7siglChNrG8Vwd:KMt1nUE+OKMOoOEILp93ob9hxle
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49532490a41a95079e0b83196ed1b7b5_JaffaCakes118
Files
-
49532490a41a95079e0b83196ed1b7b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Jalal. Size: 15.9MB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE