Static task
static1
Behavioral task
behavioral1
Sample
f0cac64f05b82671a4a017b28e068c95_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
f0cac64f05b82671a4a017b28e068c95_JaffaCakes118
-
Size
6.2MB
-
MD5
f0cac64f05b82671a4a017b28e068c95
-
SHA1
33bdcdd99fa21689c3c1184fb8d2db349969d90a
-
SHA256
a97671649737d422f75174f478319bf45d3dca1e29f022a01a865bfeab14c5e4
-
SHA512
33b379683ef5267e9d4f15b8eff87989f732bf6e48106ec1b1f4bc52877815182c9af92ff25c7ddfeed571497b49abf59fbcc44b251b3bf778cdd803b76da0a1
-
SSDEEP
196608:fe4GLZhOxmiUZwt/zIKpMD1HytNYZjDbWpHqy:W4GLZg3UZY+SHKnWYy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0cac64f05b82671a4a017b28e068c95_JaffaCakes118
Files
-
f0cac64f05b82671a4a017b28e068c95_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ