Static task
static1
Behavioral task
behavioral1
Sample
fb873707aa24274e818654a6218ac2e5_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fb873707aa24274e818654a6218ac2e5_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb873707aa24274e818654a6218ac2e5_JaffaCakes118
-
Size
8.8MB
-
MD5
fb873707aa24274e818654a6218ac2e5
-
SHA1
c3c6cc0e22615882afea6c4cc5f4c93179af91ae
-
SHA256
5e7b189be9717bd25413c24d02eced6367046042e3d3403dd3c3f0659799c3ed
-
SHA512
92d8ebc98fe44d799a8ccb82b5f8ad5abcfa74687adddc51d2dbd7777ab188863c2a9edf6645b86f5ab20ba004fa19081fa24b509ff0d86ab892427ec073cd34
-
SSDEEP
196608:N7effIPEsy58doQaTzwZ8Jq3QKnqVtxQw818dmXEQl1llLmiwlyif8cHQOyyy5Qw:N7effIPEsy58doQaTzwZ8Jq3QKnqVtxE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb873707aa24274e818654a6218ac2e5_JaffaCakes118
Files
-
fb873707aa24274e818654a6218ac2e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 114KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE