Static task
static1
Behavioral task
behavioral1
Sample
fabc3d5d50b3519aa76a986b5aca1e2e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fabc3d5d50b3519aa76a986b5aca1e2e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fabc3d5d50b3519aa76a986b5aca1e2e_JaffaCakes118
-
Size
869KB
-
MD5
fabc3d5d50b3519aa76a986b5aca1e2e
-
SHA1
fd87b55e3642e312359483eb33d086c495fa296f
-
SHA256
4958f4216dc3a6075f44d198d7eac9956ad85aa26f9f65d66e18a46d420ea636
-
SHA512
407524356bfe3fa69cf65d9bb9f0f371f8a1f09d013d56de3489710f8e430233f0b9514bcd503fc63da41f920bb7df3721454e61cfed5527cc70766717439d9b
-
SSDEEP
24576:bsKFvsqDWA3TpADpXe6SeT+hM2wrqI7BI4/Gk:pPn3VRnqrqBgX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fabc3d5d50b3519aa76a986b5aca1e2e_JaffaCakes118
Files
-
fabc3d5d50b3519aa76a986b5aca1e2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UrluNTbK Size: - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5.I)eYPp Size: 860KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
`-NEM$.f Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE