Static task
static1
Behavioral task
behavioral1
Sample
fcdbf88ba4f2b5e4d73c5b5727324bd0_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
fcdbf88ba4f2b5e4d73c5b5727324bd0_JaffaCakes118
-
Size
78KB
-
MD5
fcdbf88ba4f2b5e4d73c5b5727324bd0
-
SHA1
82b4d86b0c8d930514afd18e263361c5488749a9
-
SHA256
2401aff0b93ec25bc7c4841d52aa937c3b9c4d3b9aed5e099643473eae76e571
-
SHA512
2d2bbd7613df0c08942f91f8f84204d774004783bd873796f2e25dcbd58c97805f37b1668ad5bfcc2c8f6a988f6f286951c145bad005d4ac0817eb40359e82f6
-
SSDEEP
1536:RPCHH638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtt9/A1UJ:RPCHa3Ln7N041Qqhgt9/d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcdbf88ba4f2b5e4d73c5b5727324bd0_JaffaCakes118
Files
-
fcdbf88ba4f2b5e4d73c5b5727324bd0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ