Static task
static1
Behavioral task
behavioral1
Sample
fe1e25fd1ce5cf4d5b5d022f53c19d64_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe1e25fd1ce5cf4d5b5d022f53c19d64_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe1e25fd1ce5cf4d5b5d022f53c19d64_JaffaCakes118
-
Size
782KB
-
MD5
fe1e25fd1ce5cf4d5b5d022f53c19d64
-
SHA1
62d4f579e882829a6cd567cf607bf35b93e8cb00
-
SHA256
5b199487342ea0d722547b0219bb28f900a098e205ae49d086ed948067f27122
-
SHA512
421a92b43813c92bd8f5f6103ab68c11089b6ea9b09f7647deac0bd66503c8843c8fe3a534f02d1ad68391f461b2acf07b8fa203e7ad4b21840c1d7eeae04967
-
SSDEEP
12288:kwovrbhKYqjS6ACe0iNMYeHiQ3WxpBBec3GMCbZiH8I3VNSqBSl4Buy:kRvAYq26A0NHxA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe1e25fd1ce5cf4d5b5d022f53c19d64_JaffaCakes118
Files
-
fe1e25fd1ce5cf4d5b5d022f53c19d64_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 713KB - Virtual size: 712KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ