Static task
static1
Behavioral task
behavioral1
Sample
f95cd7dd9614796c421815c77713d42d_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f95cd7dd9614796c421815c77713d42d_JaffaCakes118
-
Size
21.6MB
-
MD5
f95cd7dd9614796c421815c77713d42d
-
SHA1
642487f49b91172b00e72762d9f967e3b967dcbb
-
SHA256
d8d420448eae1d3e21e77d3715036020005b0dd6981bb7596f089129159bc9c2
-
SHA512
71410b8939cddbc4d4a33d66686a6d7f6a3503de74e8225a056436272b7f802e2aef05f9264150e2956d9015e2f0488cb75ea01d55a03fad63e712dea9b17d52
-
SSDEEP
393216:3CcA8hwuVk7f8tuq9LXujDGiGmtGLAgoRsBopOSchzVWjhSyXPMXOFPJ:JAewuVMfq9LXsGXm8JBopBcVIhZUk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f95cd7dd9614796c421815c77713d42d_JaffaCakes118
Files
-
f95cd7dd9614796c421815c77713d42d_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 21.6MB - Virtual size: 21.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ