Static task
static1
Behavioral task
behavioral1
Sample
fb82155a142b191a28f32e3a9fe64da2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb82155a142b191a28f32e3a9fe64da2_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb82155a142b191a28f32e3a9fe64da2_JaffaCakes118
-
Size
24KB
-
MD5
fb82155a142b191a28f32e3a9fe64da2
-
SHA1
cc60ff65a9672b4a60b62d8e29dbcdeb01edf684
-
SHA256
28e4e18a21ba5e6f3629ad7ec2ef6b00867c420beb8d45a9317e9c05f3380433
-
SHA512
76ef63746b313c0de8912769f77f0fa15d17ff6f5a74f317e68c1346ebf383f30a1615f05f852d510892acd83138183a0bc83fd02dcf5052953434f8e056d363
-
SSDEEP
768:2sW2O97gR35CUCBADmPalFe4t25GA0SVcGeaxxlD:O2IMR35CRXMeOmX0SSIxlD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb82155a142b191a28f32e3a9fe64da2_JaffaCakes118
Files
-
fb82155a142b191a28f32e3a9fe64da2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
kbhelp0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kbhelp1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kbhelp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE