Static task
static1
Behavioral task
behavioral1
Sample
49d573543596cf5eab00d6981f810b0f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
49d573543596cf5eab00d6981f810b0f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49d573543596cf5eab00d6981f810b0f_JaffaCakes118
-
Size
81KB
-
MD5
49d573543596cf5eab00d6981f810b0f
-
SHA1
101bfbdeb3e2b9818f78c040ef2da22ec7ac2e1b
-
SHA256
75da933f9370644ffc79ce628d25f69a6d75bc8c8c37cf3852a8a4cd8298eeb5
-
SHA512
874c5304dbb689c040ab3953081d4ace54c1db71ca0b84ffa97a6e45338b31b15a266ee5b37a9a3daed6777e3c433c9022e08f32488cad3ec14f7d7de5273acd
-
SSDEEP
1536:uFM4xM33Co0Aao8S5udrjCYFVxwQJr0h7nJgenq3KuWmGowFlVtPiOVRURlPj/jF:uFXx4jHKjDFVxwQJr0Lgenq3KuWmGowy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49d573543596cf5eab00d6981f810b0f_JaffaCakes118
Files
-
49d573543596cf5eab00d6981f810b0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE