Static task
static1
Behavioral task
behavioral1
Sample
fa06082b6096f0b65a729f6eaeb4d924_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa06082b6096f0b65a729f6eaeb4d924_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa06082b6096f0b65a729f6eaeb4d924_JaffaCakes118
-
Size
236KB
-
MD5
fa06082b6096f0b65a729f6eaeb4d924
-
SHA1
cf2d35564c060cfc03ccd536be6fc637ce0eb24f
-
SHA256
1063eccbc6c2c591c69cc1579c294f313038c174bef97aec99f9b376fe101ca6
-
SHA512
6c705496b9a9dd4e2c1d723d80fb6a589f974e7a204eb5e7ffc4570893ca393973025bad389b57795a543fb97dea9efab478c7fe2d29d04392e02003d4b3c364
-
SSDEEP
3072:vCvsH17YYVY9H270SvdKGSG9troeHGVVm+RSsxx1cr7eX1awdDF9o:kq1jS9H2PKGvxUm+RSOxC+la2Z9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa06082b6096f0b65a729f6eaeb4d924_JaffaCakes118
Files
-
fa06082b6096f0b65a729f6eaeb4d924_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 224KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ