Static task
static1
Behavioral task
behavioral1
Sample
49d47046aea234087cfcecffdd49b6da_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
49d47046aea234087cfcecffdd49b6da_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49d47046aea234087cfcecffdd49b6da_JaffaCakes118
-
Size
1024B
-
MD5
49d47046aea234087cfcecffdd49b6da
-
SHA1
93eb9aca3d781429df6de5c139144d0881b8ff88
-
SHA256
5b52b640a3fbd97335cfdef6c3b66fca2ed38d744748dd63e4d31244e86fa494
-
SHA512
9715ec71f1e615324306401b46b2b0a1d7eba14b98f8bbe750832802aa22502faa37f233e8252e52c8a7f4ed76dc22dbe63e8c624ceaeb466ce1dec3247f8a6a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49d47046aea234087cfcecffdd49b6da_JaffaCakes118
Files
-
49d47046aea234087cfcecffdd49b6da_JaffaCakes118.exe windows:1 windows x86 arch:x86
19d97cb2fedfae2f5df84e6e16f17579
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
ExitProcess
LoadLibraryA
FreeLibrary
Sections
.flat Size: 512B - Virtual size: 466B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE