Static task
static1
Behavioral task
behavioral1
Sample
49ab526285450dac7d02f117b07d2a53_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
49ab526285450dac7d02f117b07d2a53_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
49ab526285450dac7d02f117b07d2a53_JaffaCakes118
-
Size
100KB
-
MD5
49ab526285450dac7d02f117b07d2a53
-
SHA1
cff21f4b6c0e2869051f1d6d88091be1c9fbd394
-
SHA256
cbc3ca2152cd4306de7ccf4d7d9efb37948767dba7d693d240be3684b21deb83
-
SHA512
90f89d0244e215fe758342355a273ae074945780c4f42362e4676f5194c0d6e8637f6256b02deb8c72852aef3a0677b4926703523824fef1360749fd5d44ee43
-
SSDEEP
768:lx5ZE+PbhoKWFkTP4ka7wksIdguJcF4Qhc4VjsS8jdE0IDLTtgyuDeyDrkJRWmq4:lxY+DhRW2TPpa7wkp2hBjsVr50Wm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49ab526285450dac7d02f117b07d2a53_JaffaCakes118
Files
-
49ab526285450dac7d02f117b07d2a53_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ