Static task
static1
Behavioral task
behavioral1
Sample
fed71b10b7e687e2a79d50d54432825c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fed71b10b7e687e2a79d50d54432825c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
fed71b10b7e687e2a79d50d54432825c_JaffaCakes118
-
Size
840KB
-
MD5
fed71b10b7e687e2a79d50d54432825c
-
SHA1
271748f737c25ccde7403c57afc342a41bf7de99
-
SHA256
373d7750fb5c6c9a20651b2267fa23840da0a288f62bed277ec1560ba1d7bab7
-
SHA512
4704650ad4f0037e48de4c3f455568f0c8d0b0b4bb4082a5dce764fee8f3f28ff7713bc6ab4ee6571362da9c07e26f63b272be7955e3ea40435187aac8db9219
-
SSDEEP
12288:NXm8Ag2J/HK7z0nAAXCnZd3LjKopJjVjmvKPLmSSthINfOlMg5PfR2bMl2g+3tm7:thAgDHAXCnvmO7zPLmSSoAln
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fed71b10b7e687e2a79d50d54432825c_JaffaCakes118
Files
-
fed71b10b7e687e2a79d50d54432825c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 837KB - Virtual size: 837KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ