Static task
static1
Behavioral task
behavioral1
Sample
fad7a7f9ea3212425355ef227faba8a2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fad7a7f9ea3212425355ef227faba8a2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fad7a7f9ea3212425355ef227faba8a2_JaffaCakes118
-
Size
40KB
-
MD5
fad7a7f9ea3212425355ef227faba8a2
-
SHA1
a40ac4a0b4b52f4b1005dc595ffa7bed448802ef
-
SHA256
13622ee6e4db414940a5fb4dca725168c6703300d9bb5f343b8be96fa08a4cef
-
SHA512
294dc6abdfc74806add21077d0fa185975a98e4f573955c4c89331a217bec19456d28f85cd8a7142914c1dc5d2ea9a69fb8c861aebf6217c63735f59379ee802
-
SSDEEP
384:IQUT8t5+gd1ExeluJUA8/iFBlrUHB/lPNIX2FHjLTB9L0eT0pqfA3oDK:6ozNd1EiKJkB/lPKGFIoDK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fad7a7f9ea3212425355ef227faba8a2_JaffaCakes118
Files
-
fad7a7f9ea3212425355ef227faba8a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ