Static task
static1
Behavioral task
behavioral1
Sample
fedde323b19e3b35126d3d890dad78fc_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fedde323b19e3b35126d3d890dad78fc_JaffaCakes118
-
Size
732KB
-
MD5
fedde323b19e3b35126d3d890dad78fc
-
SHA1
2a203cd8987de3d4c1429224009c06f9f2a361cc
-
SHA256
2343946fa35d33a018e44fa69edccd5d71897dd73258ae0c4dd390a0d32466b5
-
SHA512
5c359713819ed5f0d47753418d6d2eae631251c54c8a683ed6e34866ddf607ab7d2866ecd1a05ae8cc7b256c75a1b0a34fabc6962e5972eff6d298a6f7e03981
-
SSDEEP
12288:i9f7Md4gCJ6ognn0XL+Geu4ec3CNM7CW7gJPuHJas6AT15UPxpS:A744P61n0CNaEn0RupzrUPxp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fedde323b19e3b35126d3d890dad78fc_JaffaCakes118
Files
-
fedde323b19e3b35126d3d890dad78fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 585KB - Virtual size: 585KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ