Static task
static1
Behavioral task
behavioral1
Sample
fabdc596b9853f230fba1beda0f05b80_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fabdc596b9853f230fba1beda0f05b80_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fabdc596b9853f230fba1beda0f05b80_JaffaCakes118
-
Size
180KB
-
MD5
fabdc596b9853f230fba1beda0f05b80
-
SHA1
bb67cdfbe3df4c1b4af1e2d134fb350102459da7
-
SHA256
14e1587910d4f61e27d3384ebd307d5f13555a3c115cd7166541e5c73d281ab8
-
SHA512
e224287c4e2ede096e36ff7ad5792a0b34c7214be3d1cf9b1c627eb6f83fe05d9ef1bef4fcc3e3956dca03e9445ce1204f2c81e85828e9b07fe574aa114a9723
-
SSDEEP
3072:wBTrBxm9fLXiRjfq65uYwHiw3LsJn4WdVFEFjezMi35mEgR8g3W9B6i0wziU4A+E:wBRk9TuH5uY6r2b5Pm8gm9Bt0cinAp2O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fabdc596b9853f230fba1beda0f05b80_JaffaCakes118
Files
-
fabdc596b9853f230fba1beda0f05b80_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE