Static task
static1
Behavioral task
behavioral1
Sample
fb20614f34c599775709a3def3d56974_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fb20614f34c599775709a3def3d56974_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb20614f34c599775709a3def3d56974_JaffaCakes118
-
Size
1.1MB
-
MD5
fb20614f34c599775709a3def3d56974
-
SHA1
4dfda37309b6bd8a11877f9e04a5c3c78069d1d1
-
SHA256
c50816eeaf2aeb6f9a6599ebb6beecb42f0b40579d26e74574fdcb9b82c9818f
-
SHA512
871e5f52383103026ff4c06a40cd8a49b2744ed5b6224cd4b000ae2b81101ee48ad1816dca7fac0f5755ac82ccff3a054fe011385a42ad50d05002ce990908f5
-
SSDEEP
12288:7TUSXbYTsa2Obrg4mgRZpacbAhoETEe5TpSZVZsfviXDHut18ItvpyBZxi68VF6s:vUCOnZS2ODz/y3JwB++RlEsjX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb20614f34c599775709a3def3d56974_JaffaCakes118
Files
-
fb20614f34c599775709a3def3d56974_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ