Static task
static1
Behavioral task
behavioral1
Sample
fbd5b04c3979374aadb3586eb3dc873d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fbd5b04c3979374aadb3586eb3dc873d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbd5b04c3979374aadb3586eb3dc873d_JaffaCakes118
-
Size
210KB
-
MD5
fbd5b04c3979374aadb3586eb3dc873d
-
SHA1
b8fcf50e41efc23514b20ca795a5542360a88477
-
SHA256
8f141b6923d6a6c7cef98a72065fc619e99d510a13a3543b6344553313734d73
-
SHA512
403210460c62ecfb44819dfa5d2ae716bc9eeb203e6bf9737cbbee175433d70d38ecf4bc354c27fbf78e345d18444948b477d7f34b8744a98e6fb31781264e52
-
SSDEEP
6144:mebUhx57Dle98gWNlPTGQQm6agrdy2usEQu:m/DXNtTirdy2CT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource fbd5b04c3979374aadb3586eb3dc873d_JaffaCakes118
Files
-
fbd5b04c3979374aadb3586eb3dc873d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 41KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 160KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE