Static task
static1
Behavioral task
behavioral1
Sample
fbfab3f0db5067f3e8aae218d5752c3a_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fbfab3f0db5067f3e8aae218d5752c3a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbfab3f0db5067f3e8aae218d5752c3a_JaffaCakes118
-
Size
295KB
-
MD5
fbfab3f0db5067f3e8aae218d5752c3a
-
SHA1
4112713473652324d65554aad800fc159c45a4e6
-
SHA256
85c2d210b1aecb5743c097ef93941ed5383d11df0a18f8303437906bed8f02e8
-
SHA512
ab781b73fbb3e8c1ad04a5fbba415a5deebfd7bac391f3ae30c4f7ce078d5ecc083ff7ed39778efe67d6cbc93610c967054f5621ff6c0f8c70f5a1a16117fa5e
-
SSDEEP
3072:gyNx+ONJItfWA3VqDO3+YCYkQZOr/V8Z451u/WCWoTrAyA8kzNYQdrsjA7WGpyPb:FNxPYfWA4jYfoL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbfab3f0db5067f3e8aae218d5752c3a_JaffaCakes118
Files
-
fbfab3f0db5067f3e8aae218d5752c3a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 282KB - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ