Static task
static1
Behavioral task
behavioral1
Sample
849af77bf790145c4f7112614f5fbdf0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
849af77bf790145c4f7112614f5fbdf0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
849af77bf790145c4f7112614f5fbdf0_JaffaCakes118
-
Size
726KB
-
MD5
849af77bf790145c4f7112614f5fbdf0
-
SHA1
2f080138ef609bbab2284c3bd23a8cbe5d86bdaf
-
SHA256
6eb43efa276cddd8e92649572896a3520d181ebe777a1e57375bc0dc45263a12
-
SHA512
cde7720c9d74e2f560f6b4a0eeba6d481d755edf9a4a8ff161c7fa8ab0753140d6e3b3460a287e781867f7d2b6742d9fed7275c0c4472da369c9e507627c78b4
-
SSDEEP
12288:oFJGX65EMebfOyAJ5r63Zm8YO4SulH2sj/8PG7ps3iBfRco7/iogusjfkHOYab3E:oXP6PbfOyor63Zm8T2lH2sjZ7pyiBfRF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 849af77bf790145c4f7112614f5fbdf0_JaffaCakes118
Files
-
849af77bf790145c4f7112614f5fbdf0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 9KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 259KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
132 Size: 453KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE