Static task
static1
Behavioral task
behavioral1
Sample
fbbc482eefb8735f8d93453bb59780c4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fbbc482eefb8735f8d93453bb59780c4_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbbc482eefb8735f8d93453bb59780c4_JaffaCakes118
-
Size
517KB
-
MD5
fbbc482eefb8735f8d93453bb59780c4
-
SHA1
795402f75051d522984ca690d8a1091dcd07e84f
-
SHA256
a6449f8439644477d35d4308c65d0508e77586600f595f927453c4a7c46a89de
-
SHA512
a3341776a46653e562042866d64bf824e630331b9f55b240c1302e25a0ccc0f54aa4d7cbc0fa91ac3d2676ee3d00a0772c09d3377e176f6ab3ff74e9c82b22a5
-
SSDEEP
12288:XhvX3KJGrvzdEwtPf6vMd1fQlnwCLSLmdBjr:XhvHTLpE8PCvMd1fxydt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbbc482eefb8735f8d93453bb59780c4_JaffaCakes118
Files
-
fbbc482eefb8735f8d93453bb59780c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 504KB - Virtual size: 501KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 696KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ