Static task
static1
Behavioral task
behavioral1
Sample
fb12a99645d3ede4dcf3c5a0b0120bcb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fb12a99645d3ede4dcf3c5a0b0120bcb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb12a99645d3ede4dcf3c5a0b0120bcb_JaffaCakes118
-
Size
173KB
-
MD5
fb12a99645d3ede4dcf3c5a0b0120bcb
-
SHA1
2bd9fe44567d87f837bbc53efcc6ee9114f172bf
-
SHA256
bde800ed0a49fc1218bec16d932723c50129f6de01105afaa617bbbab4f30e2e
-
SHA512
4e51684bd9eb188df3234aed04a31380a635e700a041eedf20f01d5a8761837d763fc71302c019fac443272ddd7d4cb05143f89196678f502c7252ced3a018d7
-
SSDEEP
3072:jkp4vvgSJ8EvgsprebUGysnTLZsQMBkZnAcfF8EhMqU6zJg/jBQavWH:jc/SG0bpq12XmF8ECP6u/tQavW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb12a99645d3ede4dcf3c5a0b0120bcb_JaffaCakes118
Files
-
fb12a99645d3ede4dcf3c5a0b0120bcb_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ