Static task
static1
Behavioral task
behavioral1
Sample
fb5478a59c5e7e93c23d8ab6de485e63_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fb5478a59c5e7e93c23d8ab6de485e63_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb5478a59c5e7e93c23d8ab6de485e63_JaffaCakes118
-
Size
9KB
-
MD5
fb5478a59c5e7e93c23d8ab6de485e63
-
SHA1
e09a98b2780243883cd355c010e5e14a7f184731
-
SHA256
e8fdd81dbe5f77871de3a5be18e5e823d49b184ba502677c3fdd15d734f6c6d2
-
SHA512
5f194288f92d8ae525b38264a290ecdf07d9cbcff9281eb7affed5e0d7c7d42488d9d12049e4e51f16326fce72b1a592a63a31b25e810e927b69c52355fc7f7a
-
SSDEEP
192:EPskW178p5KeJKdxtogz7LWUVbNy3hh4OS1GOphVuFQs:E0kWN8W0Atl3yUGOMFR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb5478a59c5e7e93c23d8ab6de485e63_JaffaCakes118
Files
-
fb5478a59c5e7e93c23d8ab6de485e63_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ