Static task
static1
Behavioral task
behavioral1
Sample
faa542fe39e6a2e9ea2f9a155fa34868_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
faa542fe39e6a2e9ea2f9a155fa34868_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
faa542fe39e6a2e9ea2f9a155fa34868_JaffaCakes118
-
Size
123KB
-
MD5
faa542fe39e6a2e9ea2f9a155fa34868
-
SHA1
49952cf3749f661d4a889550406b390f412ec53d
-
SHA256
e8087fec3bfe808f51ff94f373db68e1600299080549475fe6641353abfd754e
-
SHA512
0bf3db738fb0170908914e1cc6ef8c83b607e2df1e7661450493f711c8618b3fedc4588171c3ba3818ae42ff6a61a4d2305b8ed7dd32d5d9398908f019d5420a
-
SSDEEP
1536:F1ZeLUx6o2vQQZBVnxe4tXmFX2Z46iYI6IyVZ8drPwAa2cHljX14N3nb2d2PFBL+:o86hzr1xpFmx2Z4rYIWSrwbjkltiw7I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource faa542fe39e6a2e9ea2f9a155fa34868_JaffaCakes118
Files
-
faa542fe39e6a2e9ea2f9a155fa34868_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE