Static task
static1
Behavioral task
behavioral1
Sample
f51e06be12e6ba8707b1be2b73462088_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f51e06be12e6ba8707b1be2b73462088_JaffaCakes118
-
Size
6.6MB
-
MD5
f51e06be12e6ba8707b1be2b73462088
-
SHA1
3a16b0e7d3b5ca8c2d94a02dbdadbd50937f5e86
-
SHA256
4070deb9e5d61a5d0e04d5d9e8408ed9db01a74016ce7d5b2c19780508f5681c
-
SHA512
5c6dcee874d10755cb82339f0fe0f6a08f0a500a7f892b2e2c55ea30baca3539aea7ea4ebb94406987d3775239e1e33b7a44e5b9f5fe5ad7f4519ef81adb61ff
-
SSDEEP
98304:04biu7UBAwbVfjZQIDlH8rgUWZnLSePNhteAsV0AltVYXIC:04bmAmQIh8exLSireAVM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f51e06be12e6ba8707b1be2b73462088_JaffaCakes118
Files
-
f51e06be12e6ba8707b1be2b73462088_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ