Static task
static1
Behavioral task
behavioral1
Sample
f772379f23efe25a79b544c8ab48ee61_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f772379f23efe25a79b544c8ab48ee61_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f772379f23efe25a79b544c8ab48ee61_JaffaCakes118
-
Size
511KB
-
MD5
f772379f23efe25a79b544c8ab48ee61
-
SHA1
3d7b6906421382a0a474a80318d60e0888f7447b
-
SHA256
2550ba9796cfc45d6ea13866509aa4ef962c642c9ca6321fe7fc0e6a28e8d33c
-
SHA512
a7ab84d48b767d70e8bf5e9a90558dd645ccf1664bb0e4fd831d2613e265b1f792dddc8a61d8d704cbb5155ca5a15ac5d6441b1b35955fb7d9c86ae5be6c09fc
-
SSDEEP
3072:j1j6+o2nqOubYTluLgx1jVw80Btq1kmUsLIVhvIL2gSS0XXx:cYFubYTltx1j30vSUsLAIL2dSiX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f772379f23efe25a79b544c8ab48ee61_JaffaCakes118
Files
-
f772379f23efe25a79b544c8ab48ee61_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ