Static task
static1
Behavioral task
behavioral1
Sample
fc49f793d60ebf4a68fc4bc7200fc97b_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fc49f793d60ebf4a68fc4bc7200fc97b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fc49f793d60ebf4a68fc4bc7200fc97b_JaffaCakes118
-
Size
5.0MB
-
MD5
fc49f793d60ebf4a68fc4bc7200fc97b
-
SHA1
54e29169a67cd0d8d3058dce9671f2af0b7f3494
-
SHA256
662c66c5f4687bb2537e99aed7b4911caa4a7ce083023171b3725e6379bc137d
-
SHA512
b5ca24c6e8c6d1673c90b07e2136a6d56a555700b1998bfa998c924c54ba2686ae7a80bf4b1d3bdb9846e4472ca90d518483a4a6e0b0e2567565465cdc8087f8
-
SSDEEP
98304:qz11Pbl5n3G8aO238xrtZPldvY9qHSoyxmTt9+xwJ1I1nsRib3JKh:qfw3sngkHSo1nG8ji9Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc49f793d60ebf4a68fc4bc7200fc97b_JaffaCakes118
Files
-
fc49f793d60ebf4a68fc4bc7200fc97b_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ