Static task
static1
Behavioral task
behavioral1
Sample
fb02b829af911ed7f571ba127c6ab47c_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fb02b829af911ed7f571ba127c6ab47c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb02b829af911ed7f571ba127c6ab47c_JaffaCakes118
-
Size
82KB
-
MD5
fb02b829af911ed7f571ba127c6ab47c
-
SHA1
bda1df11d0b69346e66e76a13b11c7f12fd42c40
-
SHA256
683c8fda307d57bb5372644db7ed4f12d279a7fd5e36e296a6889864aadb7ec2
-
SHA512
f82b6d7f19572e5808eba5bb337ade3e1a610d9cbd61c80255eb02643c8f7fe122d677d7108ccf7fed9fbecb81a780862609d5b7e98b1486e884eb05f02912c3
-
SSDEEP
1536:AC4brWfolNXe1LA/47svPnTpaXGl/OmFc2KJLCkk4f3PCXL5W1jDkoVzGTH0XL/x:z8a1EVvPTNlmJ2KBCkk4fKXl6jnaaziy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb02b829af911ed7f571ba127c6ab47c_JaffaCakes118
Files
-
fb02b829af911ed7f571ba127c6ab47c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ