Static task
static1
Behavioral task
behavioral1
Sample
ffc0db78c7265f056a3ff3dd26638517_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffc0db78c7265f056a3ff3dd26638517_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ffc0db78c7265f056a3ff3dd26638517_JaffaCakes118
-
Size
320KB
-
MD5
ffc0db78c7265f056a3ff3dd26638517
-
SHA1
747b538f65e6d0c9ddffd76efc2aaa84882b51ea
-
SHA256
b453a228d8b1ce17ecf1ace6595b9fb111a9d5e78dcb1f93bdc40402e40d37b0
-
SHA512
3a987a888e08bbc501b7605a81ff539c4622120bc9c1cec275e399030a673619d2f7e3254ed3e164781d9e251e0ce6bb75a60c26e682bf9c9a010ab0b9b25f2b
-
SSDEEP
6144:FtbUNeI1rEX4oi5eZaROBrL1sZcx+fXY0zjRMBWfiHidTKp7+5Om:DbdIlEX4oi5eZz5ow0JMsdT4m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffc0db78c7265f056a3ff3dd26638517_JaffaCakes118
Files
-
ffc0db78c7265f056a3ff3dd26638517_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 308KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ