Static task
static1
Behavioral task
behavioral1
Sample
fb0708829b1f462997a410bab5f60ab6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb0708829b1f462997a410bab5f60ab6_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb0708829b1f462997a410bab5f60ab6_JaffaCakes118
-
Size
93KB
-
MD5
fb0708829b1f462997a410bab5f60ab6
-
SHA1
0789e21163beb4e4358747b48b150387bb491f00
-
SHA256
14a33b43acf96e11fa917011f1170b13dd63c4cefd293299d453b2adcd86bdf1
-
SHA512
574c8a99c46ad5cc951f2f96449d3a11540bc1915c4f01b3d34d6f7358f98033dfb85a2f0ce6fa7695a5d7833b7882eeb445579e0588bfb2b56bbfc2025ad1a6
-
SSDEEP
1536:vduMniUfFl2BU2LJ8wPr23QqMmz5ljZhbja75zKM8naKFI5nUiHO4n0S:vgMtFkU2LJx6QvCljDja1KM8naKFOUiD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb0708829b1f462997a410bab5f60ab6_JaffaCakes118
Files
-
fb0708829b1f462997a410bab5f60ab6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
0no35y0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0no35y1 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0no35y2 Size: 930B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE