Static task
static1
Behavioral task
behavioral1
Sample
fbc0d6ef91766b119eadf2c2dbd4c0b5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fbc0d6ef91766b119eadf2c2dbd4c0b5_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbc0d6ef91766b119eadf2c2dbd4c0b5_JaffaCakes118
-
Size
43KB
-
MD5
fbc0d6ef91766b119eadf2c2dbd4c0b5
-
SHA1
c650c8586a75e9ef8f431998f2af91972736445b
-
SHA256
1749e6e4e62ea94cc4b1e88f6f3ef6567800475b96f30da8193bf442c1ce1cdb
-
SHA512
458e4970c9900687fa4debbb13f6876d72963ef8e09d339f3eb90a5960ca189633cc61018d1c164b99c711db34e0e22b086c7030a3f12a3f63511040d2192b78
-
SSDEEP
768:Y2jl9JECdC9TRl5FdKZ5rLZKcZA9oKOxUAizyOMdN1qw4SAijkQmfhGMZ:ZlbEkql5FI/rLZKQAqUTzyZdPqRS7jkf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbc0d6ef91766b119eadf2c2dbd4c0b5_JaffaCakes118
Files
-
fbc0d6ef91766b119eadf2c2dbd4c0b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccg Size: 155B - Virtual size: 155B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE