Static task
static1
Behavioral task
behavioral1
Sample
fae0c4140beaeb24e9a20581385e76c3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fae0c4140beaeb24e9a20581385e76c3_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fae0c4140beaeb24e9a20581385e76c3_JaffaCakes118
-
Size
136KB
-
MD5
fae0c4140beaeb24e9a20581385e76c3
-
SHA1
3ecff766402789869b0425f7b165872ee9c48e05
-
SHA256
3211c1d3079f3c917a7bb409bd200f4081219f14cc7bfef940ce77e6e8bee314
-
SHA512
5b2be619aa5d5d087c4aa52510626304436b6a15f57f50c84222cb88ddadbc1372dd66b69763ec2b512dbab834da75c5760337add56277f46e854fdf02e116af
-
SSDEEP
3072:VbJ5U3EzmxOEfTehGoPz0ppMzIITcjpSiEQ2z2Ahk:5AEzUehGor0P6Y8iEd2Ah
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fae0c4140beaeb24e9a20581385e76c3_JaffaCakes118
Files
-
fae0c4140beaeb24e9a20581385e76c3_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Am.KhQ Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ