Static task
static1
Behavioral task
behavioral1
Sample
fbe6793fc13ef35277380421c76d2d84_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fbe6793fc13ef35277380421c76d2d84_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbe6793fc13ef35277380421c76d2d84_JaffaCakes118
-
Size
82KB
-
MD5
fbe6793fc13ef35277380421c76d2d84
-
SHA1
a2d222a41cd0506826abdf0b94bf460ab17702a7
-
SHA256
c4915b63e86fd23767a87b09e9d68be2dd41b60666702a8fd2370a3518d6b5dc
-
SHA512
c280085017104a4aa3594de61b124a2dd93870efbcb7a36e3c5dc6548426ba4f6aec8139effdc90b543c4abc7a3f4d7c6e29efd8df1299cdd248e10e6a72750c
-
SSDEEP
1536:whuDQwFpMbtF2lSPNrIfZbd1b4X79X88Ls9tv8t4f0A3b8WIE:w8ppwilSlrwZbPb4L9qP0MGE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbe6793fc13ef35277380421c76d2d84_JaffaCakes118
Files
-
fbe6793fc13ef35277380421c76d2d84_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ