Static task
static1
Behavioral task
behavioral1
Sample
549a89da99a37f10c633b8a113fde95f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
549a89da99a37f10c633b8a113fde95f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
549a89da99a37f10c633b8a113fde95f_JaffaCakes118
-
Size
91KB
-
MD5
549a89da99a37f10c633b8a113fde95f
-
SHA1
46fd3d97fc163f7c3fde0480b38b45ac8177f065
-
SHA256
8abeabf9103cfa39f4d6cb9b7a9863239dca41f8b0ab4574562f535c02efd68f
-
SHA512
4d0c2ffd68bbee13136e20a714bde50e72e707073d1d1f602c7eb3e4b6bf879047664a8125ba165a9b16176224aefcf4b50019ec2df462b87a28e8f6b3bc91c1
-
SSDEEP
1536:2C/hBeqkZDCfrIJg/MDAADSqUpEBgb9hv30bi7Ce+MbEZ6/PGWV1sCAkcliNIvDJ:b+pCfMs1uaSBgBhvkbACeFb9GK1sCAkS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 549a89da99a37f10c633b8a113fde95f_JaffaCakes118
Files
-
549a89da99a37f10c633b8a113fde95f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ