Static task
static1
Behavioral task
behavioral1
Sample
fa639dd5a87f3eb28d0ed438d2afe013_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa639dd5a87f3eb28d0ed438d2afe013_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa639dd5a87f3eb28d0ed438d2afe013_JaffaCakes118
-
Size
24KB
-
MD5
fa639dd5a87f3eb28d0ed438d2afe013
-
SHA1
2d3841e7a4bfabca2f6406e9c3a3b5d8050743f9
-
SHA256
3c4e12475dcf464f69a56e777b18b58bd3fb8c1d9122da0a4ba7dfad6b5356b9
-
SHA512
be1ed25c1d2a615b10b54e71a254e64ce94786100348aa15121e6962075187f1c78d76c1d02e5cf096bf55c1814a5367576a8664aee411d9a8fbf0bd7f61e707
-
SSDEEP
768:EGG1QFyNRprNmWQab2EfuoI9r9u/cCZX3hY:EGmLZiaamuoMEUCs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa639dd5a87f3eb28d0ed438d2afe013_JaffaCakes118
Files
-
fa639dd5a87f3eb28d0ed438d2afe013_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 140KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA