Static task
static1
Behavioral task
behavioral1
Sample
fa6129bc7be20e95f17bbd1e69ae1169_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa6129bc7be20e95f17bbd1e69ae1169_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa6129bc7be20e95f17bbd1e69ae1169_JaffaCakes118
-
Size
168KB
-
MD5
fa6129bc7be20e95f17bbd1e69ae1169
-
SHA1
3521f5a9695cb6bdfb17b6465ca450eae0b741a4
-
SHA256
9584e2e464ca0b7d6dc7f0bf7862024778f015531e454cfdf1cb84f14305c11f
-
SHA512
9b7fa324f9607cd731fca37e662a1bb928c5f9cf76f9034904049795f1869ea20dbc7900f0e29f0cf93ee34592d8d9dfc7f5e24c7e459a61964695422e53516c
-
SSDEEP
3072:fT6NB7rCaCixDqAhEcNMEU/2qjL9PhtTF0eCKWhCYC6oUw9prlpOOLUjjV7DLkjn:fWNB7rCixTmcNnUzpLTC1wL6o5pN3X8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa6129bc7be20e95f17bbd1e69ae1169_JaffaCakes118
Files
-
fa6129bc7be20e95f17bbd1e69ae1169_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 162KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE