Static task
static1
Behavioral task
behavioral1
Sample
49849075c3a906d9906c1b644f502667_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
49849075c3a906d9906c1b644f502667_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49849075c3a906d9906c1b644f502667_JaffaCakes118
-
Size
13KB
-
MD5
49849075c3a906d9906c1b644f502667
-
SHA1
61e59f75a2055607a96ea34ae27991daa55f4a77
-
SHA256
80db687cd53429251df4200dd8c719cbcf998c6f26acdb527b575b62d773f833
-
SHA512
ff788931e72edfa65cb044031c232a1173a25c0ecf6ffc4339159fb71c7446968376c8ea6d90d73794155ad2471f3835a5c532def08e7b118795da6f3a12b393
-
SSDEEP
192:B5kcGGOuWsiNxLBGHIbi9XC452zwkg2ZRcM+BpBv:BORGOuWs6BBxbR452zwkhZRcvpBv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49849075c3a906d9906c1b644f502667_JaffaCakes118
Files
-
49849075c3a906d9906c1b644f502667_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 9KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE