Static task
static1
Behavioral task
behavioral1
Sample
fc36eb422caab891725900f1f05ac6b1_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
fc36eb422caab891725900f1f05ac6b1_JaffaCakes118
-
Size
2.0MB
-
MD5
fc36eb422caab891725900f1f05ac6b1
-
SHA1
29d8252258ec28284c10af8c410d588412e9aea8
-
SHA256
5fd51a1feb6d8c9765bd36a10675c70bacf60d24b64e418356b0b4850fb0871c
-
SHA512
d04fe5859033ad75ee9e1d7d31b971123de69d0a9a49ffeeb44069386157adfc1e36f65202a82b0b92f6fb1e4049b210b327e8aba3344bc3df1bf451f527bc30
-
SSDEEP
49152:/eQHKHaEj6d0TLaDPTHxbEhMU23VrOGzk9e:/Pq6EjnWDPTRbE6U2FOJ9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc36eb422caab891725900f1f05ac6b1_JaffaCakes118
Files
-
fc36eb422caab891725900f1f05ac6b1_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ