Static task
static1
Behavioral task
behavioral1
Sample
fba710893f20bc36695c791f262fc278_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fba710893f20bc36695c791f262fc278_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fba710893f20bc36695c791f262fc278_JaffaCakes118
-
Size
939KB
-
MD5
fba710893f20bc36695c791f262fc278
-
SHA1
8d23fec503984a7afeb7de684e26b6f4e745e7b2
-
SHA256
337ce116cae27916a5eee73406b416b6c615698020f87d21dba82939b87b35a1
-
SHA512
79f053770e64c9b9b9baad0858c09125244dfb88ecfe6d6866f72dd6949defdbd40ec0cb1e7b68e71a1b75d258038d61947e051ff4b8223044f04939dc94487d
-
SSDEEP
12288:UZWtI6RkherQZb+md4w1UOeZJys73dOvXDpNjNe8gCPZLOB0H:UuhaherQZb+md4wmOeZJ8NI8JlOM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fba710893f20bc36695c791f262fc278_JaffaCakes118
Files
-
fba710893f20bc36695c791f262fc278_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ