Static task
static1
Behavioral task
behavioral1
Sample
fb057ba3272b2c587ff4f92111b2ffd2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb057ba3272b2c587ff4f92111b2ffd2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb057ba3272b2c587ff4f92111b2ffd2_JaffaCakes118
-
Size
11KB
-
MD5
fb057ba3272b2c587ff4f92111b2ffd2
-
SHA1
be3e67086bd5fab62f460a3ad4a23d0aa1ee62fc
-
SHA256
9d0bdd636a349f482cacdd518e78e88190ba75d3aee9345946132b3fe43ddd30
-
SHA512
82b98729df03d8475e88bad1fbf5181aa36971ebd01df730d02784b2f07181964f38eef52d69974b73a7fcfe58717164467833ad795e7244864f59f885461c71
-
SSDEEP
192:nGc1Zl2+VAfNxl1THs6xgzgVGjPlRlnQAlKhFo2Am:nGcMJxDTHfRmPm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb057ba3272b2c587ff4f92111b2ffd2_JaffaCakes118
Files
-
fb057ba3272b2c587ff4f92111b2ffd2_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ