Static task
static1
Behavioral task
behavioral1
Sample
49a59e5aa8ef5aac9175e0e9cc57fd41_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
49a59e5aa8ef5aac9175e0e9cc57fd41_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49a59e5aa8ef5aac9175e0e9cc57fd41_JaffaCakes118
-
Size
5.2MB
-
MD5
49a59e5aa8ef5aac9175e0e9cc57fd41
-
SHA1
caaa7eaed05c718cce5e77826d8d18b7f7bd3f94
-
SHA256
9c666cd1d95c82b384841da1ade0e69b6cb44d56cee37fc2862f269fbbc1043a
-
SHA512
13020e2a98fe31651f8a633f3b664d00a1d41cc6bba6cfdbf7e941cb13d6ce32437dc1a54fe7f2e25a8b17d5039ff07b9695937e1102d8004357267ef0d82763
-
SSDEEP
98304:ZQNvMJnddsw3e/zW54msnF51w306lWgTRYExokxNjYJGrWgTR54xoP940nQ+UJ:aClddsNzW54mmAFlWKRYwokxKGrWKR5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49a59e5aa8ef5aac9175e0e9cc57fd41_JaffaCakes118
Files
-
49a59e5aa8ef5aac9175e0e9cc57fd41_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ