Static task
static1
Behavioral task
behavioral1
Sample
41e99b9299d87bf6841c77f6b0591db6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
41e99b9299d87bf6841c77f6b0591db6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41e99b9299d87bf6841c77f6b0591db6_JaffaCakes118
-
Size
192KB
-
MD5
41e99b9299d87bf6841c77f6b0591db6
-
SHA1
e4a17777722b6e3e18ee4bb4b0cd26c87fcc6933
-
SHA256
4231b8a0e8f927f6cc060ff6cfb985010246f3ff46cc98ec9dc120b0870f6896
-
SHA512
6891a02517da7ac7ccc33439b73e595a8f43e580ee0cf556859543763239713d96c11de7151f5c562df4c40ededb739dd1c88a9097e6fb26691673924e2edf55
-
SSDEEP
3072:5cV5Cp/a10Vi0N3K/CRZfL1XLI0+oj5ncvheb0Pay9Pjx4ESaiXyYPRr722ZPAHz:44/LVV6KRZfZXLV+enohq0CyTwyYR7B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41e99b9299d87bf6841c77f6b0591db6_JaffaCakes118
Files
-
41e99b9299d87bf6841c77f6b0591db6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 180KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ