Static task
static1
Behavioral task
behavioral1
Sample
fb076f2b77ff371beff2cb5199daa031_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb076f2b77ff371beff2cb5199daa031_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb076f2b77ff371beff2cb5199daa031_JaffaCakes118
-
Size
354KB
-
MD5
fb076f2b77ff371beff2cb5199daa031
-
SHA1
98745a574192a117883057541ceb151ca88f0e75
-
SHA256
2f27efac3bde020fd9e9a47fc2fd704ddbb895caa43f184ab5eaa7d4ea3b104b
-
SHA512
4ce6c38a0c45a38e3ed8bf7bf69b03e30310dae006143b01ec59269a299e3607ddc8c226eae9b1400153958aa274f580d71c6c103171a68d910038e036fcb238
-
SSDEEP
6144:HLzaIMPUEt7yMQNwCFnbcUOtA1hPoEuDiO10Clm0YriLxGBNNgDGgzqaszuQ:3bExaJbcUOtA1hAEul10piLxGBNGDHGR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb076f2b77ff371beff2cb5199daa031_JaffaCakes118
Files
-
fb076f2b77ff371beff2cb5199daa031_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 288KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE