Static task
static1
Behavioral task
behavioral1
Sample
a49f1db8bf19756fc96f22572ea08c7e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a49f1db8bf19756fc96f22572ea08c7e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a49f1db8bf19756fc96f22572ea08c7e_JaffaCakes118
-
Size
824KB
-
MD5
a49f1db8bf19756fc96f22572ea08c7e
-
SHA1
3b855a044acac9169876ae0a0c77c9f197ffc09e
-
SHA256
89f1bd5f3d8ab3cc7b81dcd468bcf6c6d02398639bf8da6c3049d0d7f54bf85c
-
SHA512
677d6984b901f1eb06e0e2c5bff137390b1c928f9288a7bab5b21128912bbf7ac1da974c25a9117c335b719328e7e29c2cfdf3eb3f374657d41362996e477af4
-
SSDEEP
12288:8zLr6myW53OIroVuCVAlA75kSnraBoZ7/y7JKrYUgc4e+zsy5e+Iny6gZH94+T1q:Gimt52uCaMhEyMqDo1c+cyXZd4+xKj4U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a49f1db8bf19756fc96f22572ea08c7e_JaffaCakes118
Files
-
a49f1db8bf19756fc96f22572ea08c7e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.utop Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.twd Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pghmj Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ