Static task
static1
Behavioral task
behavioral1
Sample
fbeff52addc1fa1e2edc3700cae36fb7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fbeff52addc1fa1e2edc3700cae36fb7_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbeff52addc1fa1e2edc3700cae36fb7_JaffaCakes118
-
Size
125KB
-
MD5
fbeff52addc1fa1e2edc3700cae36fb7
-
SHA1
4caa88f8b5d65c4b73d3488b27d26625d0ff89f1
-
SHA256
19ad36474d72e72b1e3a84be55c55431250399a81e01ac5aa13bf3401ed0c5b4
-
SHA512
dfabcd9a1d18c132c5e3b60c3b88b30b3f730b6799bee2b87cedf32d045a1a45357ed42ff02b8e06a737edd198e429f721c16d426e38488f5777001a9e0d7d4d
-
SSDEEP
3072:0s30Sw4rs9EpfeOEZoRyV5iDIku8sssFmbZUz6ogEhB:H3XlfzEZoRyVoDIkEssFadbEv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbeff52addc1fa1e2edc3700cae36fb7_JaffaCakes118
Files
-
fbeff52addc1fa1e2edc3700cae36fb7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
arxgda5q Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gfbpsu Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rvfse Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE