Static task
static1
Behavioral task
behavioral1
Sample
fb0174352a5ce2b05168a11412aede66_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb0174352a5ce2b05168a11412aede66_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb0174352a5ce2b05168a11412aede66_JaffaCakes118
-
Size
712KB
-
MD5
fb0174352a5ce2b05168a11412aede66
-
SHA1
216e77001932534a69a63f0f69e18bee278543f6
-
SHA256
0278713fd5a9b372c3666c287ca79dedce03cbfc3361e93372c7b25104b44828
-
SHA512
4fb157a565812022945354568891a5661ce01d974dad4d20901ce9eac4aeae193a33840a721d4226a4d0e6fba47f7a7eb5636a4954b61206f2b97662849f6bfa
-
SSDEEP
12288:SnvUFjcaDwb1xZYVH6SiTs3IMI1o/HX1gTTnTqkt9Pi/7dvX0T78VRrILV+aR:SnvWYewFYVH6Ses4MrHlGTqoFi/7df0v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb0174352a5ce2b05168a11412aede66_JaffaCakes118
Files
-
fb0174352a5ce2b05168a11412aede66_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 709KB - Virtual size: 709KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ