Static task
static1
Behavioral task
behavioral1
Sample
df7bec3ebd1cf62432e9ab9fe2205e64_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
df7bec3ebd1cf62432e9ab9fe2205e64_JaffaCakes118
-
Size
6.6MB
-
MD5
df7bec3ebd1cf62432e9ab9fe2205e64
-
SHA1
a34d9f51c7468937537e0f272a4ac937b9db2c9d
-
SHA256
ea5b9af55f33912956438ccf8cea5222deb2b471368d68bd3c7e74b695ade0a8
-
SHA512
9b5cbb079ba64f735ae97aceb0b2bbe3b7005021f0f01b072eb2d54df0ab9104de1e159bcdd18c1eada80d213b4e291aa298c81d773a1a53d376d42679c2f914
-
SSDEEP
196608:z8mqgGTE/PVXkn/Z/lJLqHPaKSjqsASB5GizcQ5NMs7u:4rnY/BmhLS39SB5GigQ5NMs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource df7bec3ebd1cf62432e9ab9fe2205e64_JaffaCakes118
Files
-
df7bec3ebd1cf62432e9ab9fe2205e64_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ