Static task
static1
Behavioral task
behavioral1
Sample
fbaa0a3e6b5173986ee5302d0ed13079_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fbaa0a3e6b5173986ee5302d0ed13079_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbaa0a3e6b5173986ee5302d0ed13079_JaffaCakes118
-
Size
12KB
-
MD5
fbaa0a3e6b5173986ee5302d0ed13079
-
SHA1
f858a1b988e717f099c34bae058302c96f28d649
-
SHA256
4adfdcb3d3fb5e4f7b95b3600ec6c3865462de19b46ef2c0ccd014db3dbb311b
-
SHA512
4c272ba192f938cacecd3506d4134f2ef72f59f8db17639acf6c56ba8a44e6eb83131a4398645ced3c19dfdc032d22be6cd0bdf2c50cc981a4a77cc9e221802f
-
SSDEEP
384:TSifIrO7k6zLoqupEaJpd5/k5jbDueeH2N0U03Y:WaAO5n+t5kueeHIEY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbaa0a3e6b5173986ee5302d0ed13079_JaffaCakes118
Files
-
fbaa0a3e6b5173986ee5302d0ed13079_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 260KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA