Static task
static1
Behavioral task
behavioral1
Sample
f08a6494d44c14ca9c96a65abc78439f_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f08a6494d44c14ca9c96a65abc78439f_JaffaCakes118
-
Size
44KB
-
MD5
f08a6494d44c14ca9c96a65abc78439f
-
SHA1
6e182d477cff7565726148dc954a699679159a6a
-
SHA256
d17904fea8a5862ccb1a9c809afcc36b4ebe27fb24176715ee161a51766f21ae
-
SHA512
346e77501cb649d7178486ed8d1ec28dd3a83e0734f7be68fe8317e9045dac718ff3fb91b3203496577e68e1d1c77e31435fde1a7327b87e24153b3dcd4f96ee
-
SSDEEP
768:/ULiLC+llR4ur3nQ/tjzjNTvhQTZlmaH4ZM0atYRFcmiVG0YMZ6VI5/8GQ3BCF9N:mwRPRhzatpFWZ4LhatYR63GN0/8GZF9N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f08a6494d44c14ca9c96a65abc78439f_JaffaCakes118
Files
-
f08a6494d44c14ca9c96a65abc78439f_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ