Static task
static1
Behavioral task
behavioral1
Sample
f449a14014cbf5ededbe68d0d9af626f_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f449a14014cbf5ededbe68d0d9af626f_JaffaCakes118
-
Size
3.3MB
-
MD5
f449a14014cbf5ededbe68d0d9af626f
-
SHA1
1b4fa856b17ce77e59b19d49897357cab3f19017
-
SHA256
7624ab783fc6c8b8f3c2c0ff7e90860b63a533412a5e5aa1caff929c6a8073d7
-
SHA512
4c4984474f0fde4f4c49b5dbdc55b153676702d40a0e911fcc1db6e6b8b070f65b590fc11ce8070833686151016f8ff57512906524fbd7eafef91d40456c0e65
-
SSDEEP
98304:+RS6nfSOQZOt+CW+7EELhF3gxpNOf2k2Y/8k:+kj8NBFwxpNOuk2Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f449a14014cbf5ededbe68d0d9af626f_JaffaCakes118
Files
-
f449a14014cbf5ededbe68d0d9af626f_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ