Static task
static1
Behavioral task
behavioral1
Sample
fc494f36e9da2224c5fba333f88116b6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fc494f36e9da2224c5fba333f88116b6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc494f36e9da2224c5fba333f88116b6_JaffaCakes118
-
Size
192KB
-
MD5
fc494f36e9da2224c5fba333f88116b6
-
SHA1
6c19f0f50cc9fdc55fb4744b8542aa18b19ec7ac
-
SHA256
0672665cb1acc33d45916388c33d8f6d034ab84b265fa51e3e209d525cad30a3
-
SHA512
d872dc6a7384b17bd0a86352df58e3d9090c20467fab520a19b3fb288c4874d1ace0f2d980e735a7a1857c5c1a1f728a9098e8218b5b95b6577545208e2873f3
-
SSDEEP
3072:onkTEoQa7I3FadxJLzLDXKIt1Ii4lWMYer1kG5gbzGztnT7IptcwBf3KUeFbhlWW:QoQWI3MxJLzyItqWZeJ48tnutl3NeF9b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc494f36e9da2224c5fba333f88116b6_JaffaCakes118
Files
-
fc494f36e9da2224c5fba333f88116b6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 180KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ