Static task
static1
Behavioral task
behavioral1
Sample
fb834dd91459435d8573710db5c62fe6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb834dd91459435d8573710db5c62fe6_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb834dd91459435d8573710db5c62fe6_JaffaCakes118
-
Size
90KB
-
MD5
fb834dd91459435d8573710db5c62fe6
-
SHA1
80b2f9c04f3fe0f36a0942b620825a168ecf9283
-
SHA256
59e75da5356c074093f97d065ee5c3054a8729acafeefa449d31d7b7f495cbcf
-
SHA512
2392f631e6e24e430f452673f6e983b7c3a0b59951756b558164eb7f4267b3b5e803ab4d52d86d707c2241af26f272ee5f4909c36af3e587e30bad75af013e7f
-
SSDEEP
1536:B/W4Y2C5nZQS5iGmBG20arl0XmgXPEcMy2iCNxVcFcb8a1yoaQtx8WQ:B/W4Yh575Rm2XmgXcRysQcb8a1yrQtxO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb834dd91459435d8573710db5c62fe6_JaffaCakes118
Files
-
fb834dd91459435d8573710db5c62fe6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE