Static task
static1
Behavioral task
behavioral1
Sample
a49e48bff88234be65e136f54512bdc8_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a49e48bff88234be65e136f54512bdc8_JaffaCakes118
-
Size
1.4MB
-
MD5
a49e48bff88234be65e136f54512bdc8
-
SHA1
56ecd2edcf698451aefba149647d0b8a77343de7
-
SHA256
a06f7f25dd81f0704ec452b99829aebb7152e590eb6c2c69039cbd6a2e8d5fda
-
SHA512
43fa07c9d586c4f0ab2ea8a458a4ee9184062594b8f242caad1f0dfec9c81c4a6ee61a066465d7eb2b28232757bd39cb0d9525e274de1c984c79d228d68e86c5
-
SSDEEP
24576:4ewr2khrdr5CHHn3VIL3D+AuNJ2wQjif14NaMJ0OKpW2qR0Mt:deLhrDWnlyCNJTHNMDmgR5t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a49e48bff88234be65e136f54512bdc8_JaffaCakes118
Files
-
a49e48bff88234be65e136f54512bdc8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MCTeam Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE