Static task
static1
Behavioral task
behavioral1
Sample
fbf6a6d48d9303cfd9f5bc20453c0091_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fbf6a6d48d9303cfd9f5bc20453c0091_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbf6a6d48d9303cfd9f5bc20453c0091_JaffaCakes118
-
Size
620KB
-
MD5
fbf6a6d48d9303cfd9f5bc20453c0091
-
SHA1
a6d049e2020b293e0649f7b872c995a4093e3f52
-
SHA256
e4e74a11a5e59edbb0c38b755bbd70f8cd60ddcdf9ca70a2e46e27e82103cfa1
-
SHA512
2f218791747bb9bf797c822944b3ede36e5271bacf77d451d45b088361b66d747b3ca85ad0d02fbe9644dc5baf2d0d2fa4e0ce48d9aaa08cf58f4479e683217e
-
SSDEEP
12288:0HrrqsjzQ9+51CsBXV+p5UWUITaD1OTi/HE/xLTYUDzOhO2c5hN:0HSsjg+1CbvUITaD1OzLtqh0N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbf6a6d48d9303cfd9f5bc20453c0091_JaffaCakes118
Files
-
fbf6a6d48d9303cfd9f5bc20453c0091_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 510KB - Virtual size: 509KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ