Static task
static1
Behavioral task
behavioral1
Sample
fbd5fa41f6738c9bc939e7fce8073cac_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fbd5fa41f6738c9bc939e7fce8073cac_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbd5fa41f6738c9bc939e7fce8073cac_JaffaCakes118
-
Size
653KB
-
MD5
fbd5fa41f6738c9bc939e7fce8073cac
-
SHA1
13630bd4bc56b7c6cc2cd18a419dbe8b649dce4f
-
SHA256
912a072dab6ce24bb88e6915a747fc11b8073b6da286ac09e7fc959fcb2023c1
-
SHA512
b253ab5095c87d4990ac8afde2df272cfddba114bfe52fbafed49dd457d1d66d9fe950af24283436f434ed38a872d28d19348a32b04b1951bc9cd00fc522ebb9
-
SSDEEP
12288:ITOLiO4IsvaYrmIeF3Z4mxxYRTKbkk03ZYBZ:lBNGmIeQmXI+bkNw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbd5fa41f6738c9bc939e7fce8073cac_JaffaCakes118
Files
-
fbd5fa41f6738c9bc939e7fce8073cac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 308KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 339KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE