Static task
static1
Behavioral task
behavioral1
Sample
49cf11eff574f173699fb91f776cfeb1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49cf11eff574f173699fb91f776cfeb1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49cf11eff574f173699fb91f776cfeb1_JaffaCakes118
-
Size
313KB
-
MD5
49cf11eff574f173699fb91f776cfeb1
-
SHA1
3a3f7db23939daf61affd8041daa1355fa7cc7b6
-
SHA256
1cd8241903a21e7dbf5e01d4fe3ec255cb539f65f9e3c69e13ee68fd48e304b5
-
SHA512
6f942b11db96a4861744fed2ce7aad7e19f64ef623682a6ff890ce31266366110952a00ac0c5989a26194c3e752aa12ae240545327a12a1241f418125c196326
-
SSDEEP
6144:nBZk6gYkSc6Dfe3o/bCs0ud7f2owt03qwCAUva+iDn2:nZHkADworPdr2owaVbn2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49cf11eff574f173699fb91f776cfeb1_JaffaCakes118
Files
-
49cf11eff574f173699fb91f776cfeb1_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 272KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE