Static task
static1
Behavioral task
behavioral1
Sample
facb0e2e011c279908847e5a52fc1bcb_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
facb0e2e011c279908847e5a52fc1bcb_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
facb0e2e011c279908847e5a52fc1bcb_JaffaCakes118
-
Size
259KB
-
MD5
facb0e2e011c279908847e5a52fc1bcb
-
SHA1
2dd21525441ab2c1f29bb1878ccc672559fd397d
-
SHA256
b6aa26ce3d6200107ef28b19e977671ece7dbf11adf4c4e8e6dab9095b7b885c
-
SHA512
737e8d8bad918a0ece1c232982712ba571ed35b357d2e5e8b6abf74a515545ffb841881876483ba7ca3701a32d8bf45c17e2b2e0ce17e126b6f26d2a2cb99400
-
SSDEEP
3072:1Z3QAhwLAYyazz1eKUxDoePt2qtObsX1McxpQd6mF0yQBVdJxPU1:1ZAAI7z8KRyvtgU19Yf6BD3s1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource facb0e2e011c279908847e5a52fc1bcb_JaffaCakes118
Files
-
facb0e2e011c279908847e5a52fc1bcb_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 149KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ