Static task
static1
Behavioral task
behavioral1
Sample
c1c49a9f1a5b99695f8f8e2fefe3bb6e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c1c49a9f1a5b99695f8f8e2fefe3bb6e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1c49a9f1a5b99695f8f8e2fefe3bb6e_JaffaCakes118
-
Size
170KB
-
MD5
c1c49a9f1a5b99695f8f8e2fefe3bb6e
-
SHA1
79b11a061d453a60ab58346cea66a68258f6664c
-
SHA256
a65f9ba5c86e493ab428c23ec364807658f9c0e9a95ed2a749546676c232df08
-
SHA512
3c0e40bf761a36b6abeab74980c4bd954cf71b1816bd2053e7bcf2d57ade2c5138ef0670d6f61bfb090769eb568bf1d4a2d3ff340070c62eb743b4f3d3c41381
-
SSDEEP
3072:jG+TkYt+IAFPUpk3xL+vFXCNkdF0tiY8mw6GQXpMR6wZ2taM7Hp:/TkAAqpk3xSd0kMYVh6i2taM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1c49a9f1a5b99695f8f8e2fefe3bb6e_JaffaCakes118
Files
-
c1c49a9f1a5b99695f8f8e2fefe3bb6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 161KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE