Static task
static1
Behavioral task
behavioral1
Sample
fb238cbeedfd521b6c308afc99528ab9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb238cbeedfd521b6c308afc99528ab9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb238cbeedfd521b6c308afc99528ab9_JaffaCakes118
-
Size
12KB
-
MD5
fb238cbeedfd521b6c308afc99528ab9
-
SHA1
6c6a94d6835ba55c6d3adf02b95c6368f80df7fe
-
SHA256
8edc9373bda29ef0692df461412f64ea1a946e20cd9eecff7e3859f6d4170437
-
SHA512
84a217435934aed979f8b2f94ed99f598457019afd6ad27aeb0ef652ec43a8ee722e7868a877f0ee2fd473f7c1f04f22b4937720f54483c61294ab9b9d3f2706
-
SSDEEP
192:Is7zP0tDWjQnUYj1JxGWIQueJ6OJiIRjbJmbhSTvisKqX6WqQPCXA6u7320XB0mT:Is7YUks4ueQOIgfcqVqaCw5732yCI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb238cbeedfd521b6c308afc99528ab9_JaffaCakes118
Files
-
fb238cbeedfd521b6c308afc99528ab9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE