Static task
static1
Behavioral task
behavioral1
Sample
fb6dadf85240ae0064c187ce81dd2f22_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb6dadf85240ae0064c187ce81dd2f22_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb6dadf85240ae0064c187ce81dd2f22_JaffaCakes118
-
Size
488KB
-
MD5
fb6dadf85240ae0064c187ce81dd2f22
-
SHA1
fab9c4941b32b5dce34d29df59700771e8094f6d
-
SHA256
73e7395f0f015a8f8592d7a078e843d2f3dc4871c785859f4c974729717eb434
-
SHA512
13504ee0a6fc9ec7bcab0872e6923d083903b1b6f17b7bf318180d5e3852dd2731e15272410252e5d34eefcc8a2cb67b3f91cb9ec153f8a648a270774d429dd2
-
SSDEEP
12288:o5ALbCRYXW187PCRYXW18HNS07pW1cLCBop+kxoQPT9J9eyc8jPFUWjRWEGhq:o52bCRYXW187PCRYXW18HNS07pW1cLC/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb6dadf85240ae0064c187ce81dd2f22_JaffaCakes118
Files
-
fb6dadf85240ae0064c187ce81dd2f22_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 428KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE