Static task
static1
Behavioral task
behavioral1
Sample
fb1d7083c4badeb2d4258f51bdba41ca_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb1d7083c4badeb2d4258f51bdba41ca_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb1d7083c4badeb2d4258f51bdba41ca_JaffaCakes118
-
Size
3.3MB
-
MD5
fb1d7083c4badeb2d4258f51bdba41ca
-
SHA1
f4370424969da0d96b4075771979914b1d35411b
-
SHA256
1e47ab78f0b21ee53e3133f97203afba2182a301ac4297f5c386f4b8dc116b20
-
SHA512
1c1f050d622e623f5e84ac3191ae4c7dcc058242189d42291a7241c3709a47eceec78c59dbf5ca994b4b96a1d32872f3320b6d0f78e7b4d87ad0454a2f81c641
-
SSDEEP
49152:e7MAJ0y9pRcEZgq9t5HVu9E26tMvato+CfugUjifK5tbRzx1l5sAflCjCpy9Nct/:wOqRcE2+J2Fnf+RBj5NCj+y9ut26
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb1d7083c4badeb2d4258f51bdba41ca_JaffaCakes118
Files
-
fb1d7083c4badeb2d4258f51bdba41ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 1.4MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 214KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ