Static task
static1
Behavioral task
behavioral1
Sample
fb45e74647c8be0664c6ae530b4d9a07_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fb45e74647c8be0664c6ae530b4d9a07_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb45e74647c8be0664c6ae530b4d9a07_JaffaCakes118
-
Size
189KB
-
MD5
fb45e74647c8be0664c6ae530b4d9a07
-
SHA1
72a43f84f6a05e214183df9123f867939a82a922
-
SHA256
98624da38ac1d00899b2ff25cbc4a280eabeeb22d418aecce8c7b61f9e06d024
-
SHA512
10b585b26a41e9d87483009101d91f0cb17abf5be12090c2cee08fcd3fd7debb511d1376f9853c7042eb6f9754381a5e7fcef637016e4c46f60e020dcbc756ba
-
SSDEEP
3072:0uc7Nhi7eM3eelPKEFgSl8U/8/KJEMH23CCizmQrVv0lQelZJ4AAaVap2:xCNC3eVEy9U/iuW3CCDQrRInbAav
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb45e74647c8be0664c6ae530b4d9a07_JaffaCakes118
Files
-
fb45e74647c8be0664c6ae530b4d9a07_JaffaCakes118.exe windows:4 windows x86 arch:x86
6859c1fbd5011b39e2b3c5ccd6eda491
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualProtect
Sections
.text Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ