Static task
static1
Behavioral task
behavioral1
Sample
fafec6971edd6c392647132f11e7c8ca_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fafec6971edd6c392647132f11e7c8ca_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fafec6971edd6c392647132f11e7c8ca_JaffaCakes118
-
Size
1.1MB
-
MD5
fafec6971edd6c392647132f11e7c8ca
-
SHA1
95236d2b2c66d7b2b5ef36795125ed1d1dbde4cd
-
SHA256
5b4dfe12ff9709fff4beeefedda085dcb68fb75f699c8ac2ad005c20d2584815
-
SHA512
352a3e0cf51fa964e72ab59cb10105b6ea795d97d812c99ef3cd4a5e240cfa0c784c10619880b3ffc332532c10c708cc7b8361b384245a1097a0a2b4974f6a04
-
SSDEEP
12288:z2/TEsYqCA9zziMKB8klRc6TY3RHIzwbWt7CgM0EH/:AT/Ya9zWMLklRHoRHIzEWtGg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fafec6971edd6c392647132f11e7c8ca_JaffaCakes118
Files
-
fafec6971edd6c392647132f11e7c8ca_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.RIF1 Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF3 Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF4 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF5 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF6 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF7 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF8 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF9 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF: Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF; Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF< Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF= Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE