Static task
static1
Behavioral task
behavioral1
Sample
b49fb02e65e61308e92307a3914a6f22_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b49fb02e65e61308e92307a3914a6f22_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b49fb02e65e61308e92307a3914a6f22_JaffaCakes118
-
Size
476KB
-
MD5
b49fb02e65e61308e92307a3914a6f22
-
SHA1
87aa6d3eb080454538922dfc211b6e2186235d9e
-
SHA256
bb4a729fe6bf35346d6cb86660cb8416a87d9313e111e7e9bf0d91356375b249
-
SHA512
4c4d9c4ee67a44227fc2def8e71f6d276c27b8fbf11bc5b628041f4ae3f4c650756aa9bac7ff26ce4eb794e0feff1e4e32ed70d201241ac5044ab362e6c699f3
-
SSDEEP
12288:nZZhVbbwD3lFDr86RMi5K0mac+hYeW9cv:nh20SP5K0maGeWo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b49fb02e65e61308e92307a3914a6f22_JaffaCakes118
Files
-
b49fb02e65e61308e92307a3914a6f22_JaffaCakes118.exe windows:5 windows x86 arch:x86
97bed9ef4f9823b5668276ae443efdd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegQueryValueExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ