Static task
static1
Behavioral task
behavioral1
Sample
fb1398e3d689ba66a816835c4aba3fdc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fb1398e3d689ba66a816835c4aba3fdc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb1398e3d689ba66a816835c4aba3fdc_JaffaCakes118
-
Size
177KB
-
MD5
fb1398e3d689ba66a816835c4aba3fdc
-
SHA1
02f4ade6867a4a82f4201261a4c321c2b65941bf
-
SHA256
c3efeb1d193bf71832158bba108722e413873be65dfe0bfc3eb83bb013f0f176
-
SHA512
1eca187e1d9e754fddce514e1f9482cc41d8733041628e3f95749ec7679865df2f8fb552e9230d5d60088283bd3cdf28e8d4a81149631b55fa7a34092fd1b87a
-
SSDEEP
3072:pVZsPd2MKsSjfgTSOpALthJFOxpfHaxaM0OMc/z6KF/9842outl:7eYMKsmgWcQthaL/2edU6KFVb2oSl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb1398e3d689ba66a816835c4aba3fdc_JaffaCakes118
Files
-
fb1398e3d689ba66a816835c4aba3fdc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE