Static task
static1
Behavioral task
behavioral1
Sample
0fabfc0e27c2555689674fa66c1ac70a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0fabfc0e27c2555689674fa66c1ac70a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0fabfc0e27c2555689674fa66c1ac70a_JaffaCakes118
-
Size
80KB
-
MD5
0fabfc0e27c2555689674fa66c1ac70a
-
SHA1
20b98cf2c14459fb8cabf9493b7ab37e2d3adeb3
-
SHA256
9a430706d4d402f7aef8ddf1729ca074d34dcaa25efa6174641b55bb3d9f1e5f
-
SHA512
f754d0dad2c1b54bdbb8a8a276ed029a848fcb5d0517a1134de1bd2da62f533cf9c5b579985a9fe847f3bbde450eb739e3ab1d2481f9a77ac2407a025b0cdd81
-
SSDEEP
1536:+S6vZWkRZgalxlDoEIiLkijfvMMcGdxibhk:+vvZWkRrlxhotiwib
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fabfc0e27c2555689674fa66c1ac70a_JaffaCakes118
Files
-
0fabfc0e27c2555689674fa66c1ac70a_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa6bad5b0bfecf9f9c8257e864d67fb7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
Sections
�b�Q� Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
��: � �l Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ