Static task
static1
Behavioral task
behavioral1
Sample
fe6ce85d74ba49cb11c1a05ae0bceda1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe6ce85d74ba49cb11c1a05ae0bceda1_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe6ce85d74ba49cb11c1a05ae0bceda1_JaffaCakes118
-
Size
805KB
-
MD5
fe6ce85d74ba49cb11c1a05ae0bceda1
-
SHA1
e52441c780c4f758001c0f617721835439b0939b
-
SHA256
c32223af2b4f6388573fe46183f8605d29dfffb5d7a0300918f297bdb37f6bd9
-
SHA512
83d2bba1af81e78c434145508470abc1f522c821ff88f3dbfd44e87b3cd158988925250de5bf0877ab5d6661dba749f47031f1d02b554278f94dafeff2a36e80
-
SSDEEP
12288:QaZ84PSgUW7mpLLFG3ZqY39HCqvazGda+LBdQ3xeug6B9bIcNZi2iN:QaG4WLFgoY39iqvaT/g6B9ccNU1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe6ce85d74ba49cb11c1a05ae0bceda1_JaffaCakes118
Files
-
fe6ce85d74ba49cb11c1a05ae0bceda1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 802KB - Virtual size: 802KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ