Static task
static1
Behavioral task
behavioral1
Sample
49a1528da9b00ef2a5b3879be36c9a88_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
49a1528da9b00ef2a5b3879be36c9a88_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49a1528da9b00ef2a5b3879be36c9a88_JaffaCakes118
-
Size
114KB
-
MD5
49a1528da9b00ef2a5b3879be36c9a88
-
SHA1
9d4145b951208f6dfe1c89e611716f9f6764df70
-
SHA256
7ea3b4287172425603df88299882968ae3057c3e0f487189b96d483667e5bb98
-
SHA512
f28adfaebd6253d6f47ee956808b91c9e4ec3d8cceee4b4980c126df70bf56c7053f2b6d4d63a6b03173f11608b874199ba5d136f577ca4c65cc64a047b7bba1
-
SSDEEP
1536:rFvHOrozHmbPDXZnXDdccF9dGMGvffegwH7FJ5drWAto+nXh3rPLHgcntny4ZQRQ:tHmbPDXZXRPzGvfkH7PKAGQ7btrQRP4d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49a1528da9b00ef2a5b3879be36c9a88_JaffaCakes118
Files
-
49a1528da9b00ef2a5b3879be36c9a88_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
SG Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yxT4 Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE