Static task
static1
Behavioral task
behavioral1
Sample
449fc78f7b2ef913c633ecba39d1fa73_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
449fc78f7b2ef913c633ecba39d1fa73_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
449fc78f7b2ef913c633ecba39d1fa73_JaffaCakes118
-
Size
4KB
-
MD5
449fc78f7b2ef913c633ecba39d1fa73
-
SHA1
e2dea79301ec430148cbac6afddc4cdeece3247c
-
SHA256
08f954fc56d6f1f645b899f219abb2e9be29f15cba8834d5c0bec803e3bec411
-
SHA512
3d21721d20ab0ef64842e54022f0525938c9f78727fc759065e27ecc5d436f8016f69ff611e1a17250acfd1c8190a2a74d11d9e54b77a35db36d31c738b18a46
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 449fc78f7b2ef913c633ecba39d1fa73_JaffaCakes118
Files
-
449fc78f7b2ef913c633ecba39d1fa73_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ