Static task
static1
Behavioral task
behavioral1
Sample
fa0cff550f23d303cdbe983934ccc1fe_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
fa0cff550f23d303cdbe983934ccc1fe_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa0cff550f23d303cdbe983934ccc1fe_JaffaCakes118
-
Size
596KB
-
MD5
fa0cff550f23d303cdbe983934ccc1fe
-
SHA1
bb810529124385acb4c1e3d4504cdd91d5a71bce
-
SHA256
e7b892b5279105bf9b920d83ead1a283df657de0dc3a9298a846d2c19895fa02
-
SHA512
ab17af1da36a368d85fa69037a979ba15ccbbb5990e33d1c548ceef17f7f882a482ae44a7175f7337404feb8616de912105642a65ad5d9c3f1460759e8f5211e
-
SSDEEP
12288:APm5W5wwyPImzQ/+afpnRyY9jjU8PKcyrpZt1tLw98NYZ/6/loPenn4GUhU:A+50wwuFQZfpcYRzPmZDe97TPenn41C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa0cff550f23d303cdbe983934ccc1fe_JaffaCakes118
Files
-
fa0cff550f23d303cdbe983934ccc1fe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 556KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE