Static task
static1
Behavioral task
behavioral1
Sample
49f828014fbe14644fd4150269e4c12e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
49f828014fbe14644fd4150269e4c12e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49f828014fbe14644fd4150269e4c12e_JaffaCakes118
-
Size
1.3MB
-
MD5
49f828014fbe14644fd4150269e4c12e
-
SHA1
730f52d6ecdc68923097ed259a9846f0b151bb51
-
SHA256
6ba895d40702f8f030900e8b6ace2e3428aabb541d60173d851db2e7b45e6d2f
-
SHA512
60ad59d3ef5033ed23150bcc6be84a4a83f1f189ae1130c1c1dc2582be820f0f6120a8e74d547fe9c0d19ca05ab70c0e3a52b41fef45b17dca3c20075a061089
-
SSDEEP
24576:v6EstmmiF96iACdYVhlFE5guOdPjM3t9nLAPGnGQotdXmhlL+:iEsQmq96zCdYVtwp3t9nLAeToj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49f828014fbe14644fd4150269e4c12e_JaffaCakes118
Files
-
49f828014fbe14644fd4150269e4c12e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 95KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fZ Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE