Static task
static1
Behavioral task
behavioral1
Sample
49c9a90ed5ca46b10ef5c117c8235558_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49c9a90ed5ca46b10ef5c117c8235558_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49c9a90ed5ca46b10ef5c117c8235558_JaffaCakes118
-
Size
976B
-
MD5
49c9a90ed5ca46b10ef5c117c8235558
-
SHA1
a1396e672a49917b419542b8161ca2e3d593e95e
-
SHA256
da596619be0c153332b5f2e74dca1af36120a727e1b9aae0f0aaa92dd9af9fb6
-
SHA512
ed36963d61e90c8542084db0658fe4844249e98486e2f071f146ee452615e8e23c568cd88389c5d1678646b302c5fd0ecadfe96a1d5a7a71f94c266216ee89ab
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49c9a90ed5ca46b10ef5c117c8235558_JaffaCakes118
Files
-
49c9a90ed5ca46b10ef5c117c8235558_JaffaCakes118.exe windows:4 windows x86 arch:x86
0cd5c1beebc066d3ae75c8cd3c3e63f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
CopyFileA
Sections
.text Size: 480B - Virtual size: 468B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE