Static task
static1
Behavioral task
behavioral1
Sample
49d75cd45ef5c7c7b023ce64041d6390_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49d75cd45ef5c7c7b023ce64041d6390_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49d75cd45ef5c7c7b023ce64041d6390_JaffaCakes118
-
Size
51KB
-
MD5
49d75cd45ef5c7c7b023ce64041d6390
-
SHA1
eb4954a4e549d901b8f5da8d95a75051c56e1346
-
SHA256
acb77fcbd7794690dcfde20ff141d627573c589813ffd10880ccea478253cf5f
-
SHA512
23ec70798a32a5e3eb46732394eac4e9a4e3fdaaedf5e6e07a2cbbe21701e4dfe7c72668731adba133ff38c57b1d267125531b5e9ddf4f4c6d6c632489b0aa39
-
SSDEEP
768:sQei5U/aGL35pBS/NQZMetpaNvH0518u7BKRp8naAbPWfsGzlmkc7WB2s:PeoWJr5pA/yZtpi/0Eu1Kof69dQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49d75cd45ef5c7c7b023ce64041d6390_JaffaCakes118
Files
-
49d75cd45ef5c7c7b023ce64041d6390_JaffaCakes118.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code1 Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE