Static task
static1
Behavioral task
behavioral1
Sample
49f28484e116c770f0177eb7952e4fe7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
49f28484e116c770f0177eb7952e4fe7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49f28484e116c770f0177eb7952e4fe7_JaffaCakes118
-
Size
32KB
-
MD5
49f28484e116c770f0177eb7952e4fe7
-
SHA1
54d602f4f4b04267b186122de37c3bb9abb949bb
-
SHA256
248ab08c129e6a9e13377ce742bf22b7f50bd954fcba52670116844fd045331a
-
SHA512
a65be967e282896edce63cff697c8967b55b89a59490117030768fea8bd2f34b12348af9ab2490d75dd54eb87b8aa1f82a79169d393d7a1247295e74708d5c07
-
SSDEEP
384:enZ9BBROtboZ+/NMUIA7cDCpuLdVo2dneZqM+0qBOpFR7YLGNLBd:sB29wMNOWcPm+FcR7YL2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49f28484e116c770f0177eb7952e4fe7_JaffaCakes118
Files
-
49f28484e116c770f0177eb7952e4fe7_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE