Static task
static1
Behavioral task
behavioral1
Sample
49edc66be22e1f784c478d56d4f999b3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
49edc66be22e1f784c478d56d4f999b3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49edc66be22e1f784c478d56d4f999b3_JaffaCakes118
-
Size
243KB
-
MD5
49edc66be22e1f784c478d56d4f999b3
-
SHA1
f7837b619386c0166a14800e0b950eb80186213f
-
SHA256
d0887b3931d036f992856bab9d9376c6f0077c5ba920b1e81c8399cde4c5f079
-
SHA512
1d0108cfc4e41728dbc0a19acfe60326ee41c2b033f36b8f5863cfa731badf87b03a0b1b7c508f4f523d5102a4751b0b648dfd1394624716e13b90dcfd7bff10
-
SSDEEP
6144:1Y3jr7GJvc7lV0Jzlyh7lvc0g4rgL/KIpfx+8/VApg/+AWZlvog:1lBwV06h7G0g40/JVVb/+A6tD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49edc66be22e1f784c478d56d4f999b3_JaffaCakes118
Files
-
49edc66be22e1f784c478d56d4f999b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 214KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE