Static task
static1
Behavioral task
behavioral1
Sample
fbc9d00de26bec4bc72689f63a90063d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fbc9d00de26bec4bc72689f63a90063d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbc9d00de26bec4bc72689f63a90063d_JaffaCakes118
-
Size
320KB
-
MD5
fbc9d00de26bec4bc72689f63a90063d
-
SHA1
a2ca825afb990ef565abf96a4a143538c4d309b5
-
SHA256
3d41078cd5ae5b07e92a16f9b7a4864cc3b335bd23a9787e51247815a73ef431
-
SHA512
7733d25746904ef92b30baa794f5a12b9ad1b6ca218c6c6de07873d536a7cf659b223c6e999681ce6de2aee8e5c0d3dc656a9d8a3bf4643b87eae5fca164eb32
-
SSDEEP
6144:BGbtSKoGAT+in8cjgE6NK1i1T01QHR6QHfKVSnCx73zhSMIrlsuBe0vvA8V:GtZoB8cP+lTuOLHfa/73zhSMQlnBxvA8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbc9d00de26bec4bc72689f63a90063d_JaffaCakes118
Files
-
fbc9d00de26bec4bc72689f63a90063d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 1008KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 319KB - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE