Static task
static1
Behavioral task
behavioral1
Sample
49f230c812cef8ca1d758428ddd660b5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
49f230c812cef8ca1d758428ddd660b5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49f230c812cef8ca1d758428ddd660b5_JaffaCakes118
-
Size
41KB
-
MD5
49f230c812cef8ca1d758428ddd660b5
-
SHA1
124c231999def705819455deb3ac549826f61ded
-
SHA256
94da3525cb6e85871647e76da07867c2be52fa7ebc5d5034f9c725ad30335fd2
-
SHA512
14fc6e8c08cbe3e305763bbd905ba51caabe8fe3056b29ff3966460e15a0acfb41167115cade7017186e396b14f7eb715923ac60a31dfec500e5c088c4d74a81
-
SSDEEP
768:u/NrshPL9F0QPerU91tCgBW85FE7nMPj+dJF94XT4Lj5v+Tg2dFn3HM21U1:u/Nrq0Q2kLCgBW8XEgP+2X8LMH7G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49f230c812cef8ca1d758428ddd660b5_JaffaCakes118
Files
-
49f230c812cef8ca1d758428ddd660b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
5oh6g670 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5oh6g671 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5oh6g672 Size: 779B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE