Static task
static1
Behavioral task
behavioral1
Sample
fb07f89429a4e06af68c9db71f3a6e1f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb07f89429a4e06af68c9db71f3a6e1f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb07f89429a4e06af68c9db71f3a6e1f_JaffaCakes118
-
Size
1.6MB
-
MD5
fb07f89429a4e06af68c9db71f3a6e1f
-
SHA1
5370b9647e72e6009a0275121868b3fb804f203b
-
SHA256
d5cc3fe0501053ec0aeef73d5c4d9c0e8d828f6ab05d0580f94ebe78027593c4
-
SHA512
65b949ad46aa98cc43733678b0746b80ca890e3eedd4b24b5faf4dbd4209512f1a5af08164b5444d06f89acaadb246826ca6b07d41e215e3c9e95d698926e167
-
SSDEEP
24576:9tgdR52rJK49pT+s/3bjSiUMIBX7wlZyiLEfGEw7Dp4Jlr4qAs2mRlK/hzdloOW1:XQSFvXBSP5fGkfrksdRlK/hzILswm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb07f89429a4e06af68c9db71f3a6e1f_JaffaCakes118
Files
-
fb07f89429a4e06af68c9db71f3a6e1f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 235KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�ڱ� Size: 1.3MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE