Static task
static1
Behavioral task
behavioral1
Sample
fa13090d9919999a63140bb94c49f019_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fa13090d9919999a63140bb94c49f019_JaffaCakes118
-
Size
396KB
-
MD5
fa13090d9919999a63140bb94c49f019
-
SHA1
0d0d75f12e4d431d23943849f678384d17f8d340
-
SHA256
6cef3da01ffb20be5de57aded63cb2648eb0d0c8e03dbf9a037a316cce2009bc
-
SHA512
9122f30de10f9f563b6497b16a1fa55ea5c1cbf0424bf3915bbd94da4c296fda2b6d4cb36824f0c3688a3f11745c2d36f6c5f0e25d66c4aa3ed544524249f117
-
SSDEEP
6144:s9xoo26nm8Ujj7ZCfOPQrhOXFTHBv3sQD2rJVsbxYyfqDrFveD8SHbW9XGkXXIWs:Qoo26xM4OI8XZBv3sQDhF9yFSk92qbS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa13090d9919999a63140bb94c49f019_JaffaCakes118
Files
-
fa13090d9919999a63140bb94c49f019_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 384KB - Virtual size: 382KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ