Static task
static1
Behavioral task
behavioral1
Sample
749eac1346a886b9a55d317d9ace4fb3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
749eac1346a886b9a55d317d9ace4fb3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
749eac1346a886b9a55d317d9ace4fb3_JaffaCakes118
-
Size
114KB
-
MD5
749eac1346a886b9a55d317d9ace4fb3
-
SHA1
afec0776ddc3f0ab7e542f7f46b15c5a9276820a
-
SHA256
ab2fbadcd7b5eae8f77a51cc9dc47e8996de44ccd423ee7fe5d8382d71dd4249
-
SHA512
d6cbdcbc8fec6e8481291a469c08db4ea137cf35641b8beaf931106d590b91f8e8acd0b281f7fec607e397627bb4083f1ebc693089d09352597d0e1fb268efc5
-
SSDEEP
3072:G9yMpQm1Xf9s+OoDqdCS4rKqKJFKASu8tzWn:GQMpQm1XO+hAnIK7Yt6n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 749eac1346a886b9a55d317d9ace4fb3_JaffaCakes118
Files
-
749eac1346a886b9a55d317d9ace4fb3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
w2bzkwi Size: - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pqmov Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
msm Size: 212B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE