Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_f9fbbd4c6a8b4df3d5d08cba082a699a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_f9fbbd4c6a8b4df3d5d08cba082a699a.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_f9fbbd4c6a8b4df3d5d08cba082a699a
-
Size
10.6MB
-
MD5
f9fbbd4c6a8b4df3d5d08cba082a699a
-
SHA1
723abb7421800d2a1297a29b3792414ea16573bc
-
SHA256
2a03df419d6c6ae75dd211f5647dd986616133ef81e1dac7f2b5c2447702c467
-
SHA512
06e426758ef3d32fa961d5f9e028377e7e8878d59c4e7936103dc0279d189033bed8e2bd9cf1e10203e698d96f2a3ac5bebdfe72d878c410c32faa70244df9b6
-
SSDEEP
196608:enAZFZNUmR+FWM9pwQpHKb2x257MgnFEz1sZsqw/UaM2hHEH11wN0v0p:eAZtFg0MfFxKI25IgcusqNPNcNk0p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_f9fbbd4c6a8b4df3d5d08cba082a699a
Files
-
JaffaCakes118_f9fbbd4c6a8b4df3d5d08cba082a699a.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
lF"s%= Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 242KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ