Static task
static1
Behavioral task
behavioral1
Sample
ffbc42d9cbf024438968e954b4dea150_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
ffbc42d9cbf024438968e954b4dea150_JaffaCakes118
-
Size
1.0MB
-
MD5
ffbc42d9cbf024438968e954b4dea150
-
SHA1
29f2f5f6942edacf994184079230dfe1f0b51c47
-
SHA256
d696f3161b85b7f671fb0209485739a94a75a038a1412863df88ec30a4d9149e
-
SHA512
f667ac61ca56e8ce947576f6a439af4636271dc913a848919ba7c0d6c36907b553c17416f4e02d7288864b0040031c1aa74aa11710600838fbb65dea684fbbbd
-
SSDEEP
12288:17pEHnFYQWHONCdLivrJXiMmjWbWBvB6H:17pqFY3hNi1WVB6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffbc42d9cbf024438968e954b4dea150_JaffaCakes118
Files
-
ffbc42d9cbf024438968e954b4dea150_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1023KB - Virtual size: 1023KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ