Static task
static1
Behavioral task
behavioral1
Sample
49f7bdf7a08846e72a676b379efeff5d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49f7bdf7a08846e72a676b379efeff5d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49f7bdf7a08846e72a676b379efeff5d_JaffaCakes118
-
Size
324KB
-
MD5
49f7bdf7a08846e72a676b379efeff5d
-
SHA1
f0c12aa9b06ff2a2a0f045bfc29e103a3c4e614d
-
SHA256
3cc092fbd13681f32f3eaaf74d1332650d143074022adf9cf7ffdd9b9b8cd349
-
SHA512
66cb8a8d4df9ff8f8385b1eee0bc964af71aaf99c72a0e86ddf7535486eaddad44e770fd3358a47781166a66dfea9ff515923aec78d0ac489a731d9dc5eb32df
-
SSDEEP
6144:SnY7Ypc/h1ppPxtNSvKbH0n5HszGYTFQmu1jc0qNVPVo13nHp1KP:QY7Yo1pprNSibK54pfuUNVM3n+P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49f7bdf7a08846e72a676b379efeff5d_JaffaCakes118
Files
-
49f7bdf7a08846e72a676b379efeff5d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 312KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ