Static task
static1
Behavioral task
behavioral1
Sample
fa54cbcd707f89f87ec319865a0d0331_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa54cbcd707f89f87ec319865a0d0331_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa54cbcd707f89f87ec319865a0d0331_JaffaCakes118
-
Size
27KB
-
MD5
fa54cbcd707f89f87ec319865a0d0331
-
SHA1
d4c80761bab1a591830a352997692e18bdc4aab9
-
SHA256
646897698a86531cd5f82597d10995bd06398a8d38d21f1026e707910f3f3504
-
SHA512
1d7aaebbc2d8b156975e8000251a7c78573b8af9fbc278c3e96aa4a6988f41d686b4c79001465587f5f2982a5a9e373e8fc2eed902a97a98132febcbbd7bb179
-
SSDEEP
384:L+s2vDprYpKHjq1BmltqiE4W/tjp9Fy5XHgGLhq5KbEXsC5AmXNVzeeom/9+WNRM:n2d9jq1BmDWhI5Xzm98IXN5/9wkO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa54cbcd707f89f87ec319865a0d0331_JaffaCakes118
Files
-
fa54cbcd707f89f87ec319865a0d0331_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 1012B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE