Static task
static1
Behavioral task
behavioral1
Sample
ffe24ed6fd84a7c44447c54a9d0cb209_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffe24ed6fd84a7c44447c54a9d0cb209_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ffe24ed6fd84a7c44447c54a9d0cb209_JaffaCakes118
-
Size
662KB
-
MD5
ffe24ed6fd84a7c44447c54a9d0cb209
-
SHA1
6260a2a001d98e80c5b8b1d2e971fb4a79cb0948
-
SHA256
a74793a39fe6c942643ceb7ec5640d92890dd34b49244582113b3161863c3409
-
SHA512
a4dbc5412b7d88faa9603875662a334be1592d0e18abe635e4f2a0321529a1a6f219e7066d1422aa6e976b96f4d91728ea8595ebdd12658986ea2e8cef05443b
-
SSDEEP
12288:9OofC9Oh0zyZLEaxjlEbVNtUm6S3SjncPheykJ4ctQIf/0cYv2tasGHW:nfvhgyZRxj09tBSzhykycuIfqutasoW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffe24ed6fd84a7c44447c54a9d0cb209_JaffaCakes118
Files
-
ffe24ed6fd84a7c44447c54a9d0cb209_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 659KB - Virtual size: 659KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ