Static task
static1
Behavioral task
behavioral1
Sample
fb252005150b08e4d0740c732cc3cab6_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
fb252005150b08e4d0740c732cc3cab6_JaffaCakes118
-
Size
716KB
-
MD5
fb252005150b08e4d0740c732cc3cab6
-
SHA1
22bd274fccb1f5d4b294a304d808f47ad98106af
-
SHA256
383fe188c985288fcfc13fa9382e8ae4394dcb1780d6f59ca641c8f278cb68ac
-
SHA512
7fd2da0be51fb761144cb937a86e5b34230fa1c143727234a35da98061a1cd479dbe06bc2ee1b6772e1275d4c6eb4c76a707dc6906a4c7441cc73adc8eff1f77
-
SSDEEP
12288:BY1PRDiACBvMdRljd1mBSgqH4/tp+VDr0TOSJS8QTmy8b+i8JKT3Wo+xbsL:6Ly0dRljd1mBHkQOSVQTza98Jit+xQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb252005150b08e4d0740c732cc3cab6_JaffaCakes118
Files
-
fb252005150b08e4d0740c732cc3cab6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 704KB - Virtual size: 700KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ