Static task
static1
Behavioral task
behavioral1
Sample
49b46a41d975b72a12ae356387def2c5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49b46a41d975b72a12ae356387def2c5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49b46a41d975b72a12ae356387def2c5_JaffaCakes118
-
Size
129KB
-
MD5
49b46a41d975b72a12ae356387def2c5
-
SHA1
0414d650349efbf32591be62b1633e3667e6a668
-
SHA256
4641c616ed03de3d5a1512151609f5194e6ede3e027c5759218620dfe551e193
-
SHA512
5e913ccb162abb2df066c9a87b04afcf2a03c06f6cf1a34205988a92bbef65b66ae1158bb9566ca2f400faaa085bd1aa93a31b8eb187db98e89c469a4517f027
-
SSDEEP
3072:1OKuKEFwnMdb1tNv1aC3tbcL0XbLOFOVWjkLw7IqUU/D+8eM9:ETXwMd5t/D3o0XbLOMVTdU/D+8eM9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49b46a41d975b72a12ae356387def2c5_JaffaCakes118
Files
-
49b46a41d975b72a12ae356387def2c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
9k7vsqf Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ighe8u4u Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE