Static task
static1
Behavioral task
behavioral1
Sample
fb0b1391b1a93a28af44103842ab1b0d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fb0b1391b1a93a28af44103842ab1b0d_JaffaCakes118
-
Size
21KB
-
MD5
fb0b1391b1a93a28af44103842ab1b0d
-
SHA1
b4c103f1178c660e95b69865d57b5bc51a09d9f3
-
SHA256
a12bcc6888cadbec78e3dd085bc4768968b6447ccd2f3272d82a4b25e3590f22
-
SHA512
f39928cdb1e948495ba6f28e70f8cc2506d11fb1e617d42acf3c5179a0c1073b4717aefacef9d23461ca1200b7a80a16943b2626927bc7eabdc3707fac930972
-
SSDEEP
384:kr2IgRNDqFLCvJkBA9hO37F9opVzYA/+8YB506WSMOAOVZrN8C:mgrxkBA9hO3UDVGNRMOdVZr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb0b1391b1a93a28af44103842ab1b0d_JaffaCakes118
Files
-
fb0b1391b1a93a28af44103842ab1b0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE