Static task
static1
Behavioral task
behavioral1
Sample
fa417eaa7bd1cc56c263686551edcd13_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa417eaa7bd1cc56c263686551edcd13_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fa417eaa7bd1cc56c263686551edcd13_JaffaCakes118
-
Size
208KB
-
MD5
fa417eaa7bd1cc56c263686551edcd13
-
SHA1
8fca4add05cb1fd90ab97bd63b95b6e4a3cefcc6
-
SHA256
ffea71f5cff1b574ec9b61f6f0fd46e774e474e657c1c283ce75c5a43d3a2ce9
-
SHA512
e06af5581c2a6c7b3fd6e3c4379c16b4fa1afc4b6df38bdf8d86ecb9378ab903331a5146d73cbb9fce2fb63b02eed207ea7ab5008e9666966ad3d386b3186bbb
-
SSDEEP
6144:pQODG35TFy+LxwKZkM+IiXrB7xAA6oe679IHf:p3G35oaZZOIcB7xUVSa/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa417eaa7bd1cc56c263686551edcd13_JaffaCakes118
Files
-
fa417eaa7bd1cc56c263686551edcd13_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 989KB - Virtual size: 988KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ