Static task
static1
Behavioral task
behavioral1
Sample
fa3d56bb5c26b3512369e85b3917067c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fa3d56bb5c26b3512369e85b3917067c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa3d56bb5c26b3512369e85b3917067c_JaffaCakes118
-
Size
278KB
-
MD5
fa3d56bb5c26b3512369e85b3917067c
-
SHA1
4d7f7bcb90b03296ab5af5bacfdea9a03c0f58ab
-
SHA256
c83dfee0b35be414b2ecb0a3b5fff41c790bb356c2774a2fc681a8981978b48b
-
SHA512
48138527d73c0dc2138f660c11bc0ddeb75384bd932162d80ced5ef7e99b74d1d69ef3a4340fd4eb2e5bbd896273691e7218d91a54fb9efc2fe379946ef84201
-
SSDEEP
6144:/8Akg36FMYH+NUGIpNpv5B+jqMd7mDO5:+g36FvxZuqMsE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa3d56bb5c26b3512369e85b3917067c_JaffaCakes118
Files
-
fa3d56bb5c26b3512369e85b3917067c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ