Static task
static1
Behavioral task
behavioral1
Sample
fb68d949f281e57b07033cc4db3bf047_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb68d949f281e57b07033cc4db3bf047_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb68d949f281e57b07033cc4db3bf047_JaffaCakes118
-
Size
20KB
-
MD5
fb68d949f281e57b07033cc4db3bf047
-
SHA1
4c30d6f3844333380dba8b076800dd639c722275
-
SHA256
a7b41c03cdfad912a7fdbe9241493ccda6a003d76b4e68174ab94a7ebaec9bca
-
SHA512
c0a2f965a21785ad0aa4f31e18b3ccb4973e243e0c7475710bfe5e813efad13cf0fa78890992c5f20b4441348273075dc05024fdea2921b7240ac94511dad4ed
-
SSDEEP
384:blKwH3aH0V4+2XsPodYsR/kfjd47JYP741cV7l72iLDUd4IzRyPj0:bE5sPSYsF2xyJYPecVJ2ifUd4GRyPj0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb68d949f281e57b07033cc4db3bf047_JaffaCakes118
Files
-
fb68d949f281e57b07033cc4db3bf047_JaffaCakes118.exe windows:4 windows x86 arch:x86
119c7a0a8fc5eb9aacd5f16173d22e58
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetProcAddress
LoadLibraryA
GlobalAlloc
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 158B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE