Static task
static1
Behavioral task
behavioral1
Sample
fa3fbbb447055c9036ca0e9be37cb1d1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa3fbbb447055c9036ca0e9be37cb1d1_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa3fbbb447055c9036ca0e9be37cb1d1_JaffaCakes118
-
Size
262KB
-
MD5
fa3fbbb447055c9036ca0e9be37cb1d1
-
SHA1
5eeba32fcce0dc5c5c2d32e932ff0a2dc2e5b6ac
-
SHA256
e7259bec5d95990e2ac424c75fdba7b62118b7d80f2c038f253efb8e0c697599
-
SHA512
0bb982b8b42e961c1ff75e319e685859c5c38d2561108647a98e2b9322e0451117c5041c893d4d7cd3963a2216cf12e646c764f0e7345e8127c167abd38fa849
-
SSDEEP
6144:DNPmmCdGZOLrw67cdNaVzkFXKaKc5+LGWXKfF6z/d9F48RUKxyeiE76:DomU7iS/d348eKx9G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa3fbbb447055c9036ca0e9be37cb1d1_JaffaCakes118
Files
-
fa3fbbb447055c9036ca0e9be37cb1d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ