Static task
static1
Behavioral task
behavioral1
Sample
fa0f674603d7a19e5787d1c611b3fe0c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa0f674603d7a19e5787d1c611b3fe0c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa0f674603d7a19e5787d1c611b3fe0c_JaffaCakes118
-
Size
46KB
-
MD5
fa0f674603d7a19e5787d1c611b3fe0c
-
SHA1
b7852bff37cbc015d887e50555bb57ef213c0904
-
SHA256
12aec258b2a299977d136f3e9180e0b852a69cba005f932fbfec5e0b8fd55f67
-
SHA512
66a707a151977e8c8398713a83c289b9fdd370013cb0b0324c27ab31f76c799bdf79c5dfb3f62fa7f9d5d89c520294689c943c5b7f79d3b7d40315f3868985ee
-
SSDEEP
768:QcreJ9ZOVMrVqA5wfDYX9PJsn42rSmMiN0HKdrgR0G0hVrlaIz6MqVk:Vq3YfA5fJK42Gmlr1aurlaIC2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa0f674603d7a19e5787d1c611b3fe0c_JaffaCakes118
Files
-
fa0f674603d7a19e5787d1c611b3fe0c_JaffaCakes118.exe windows:5 windows x86 arch:x86
6fb48bd1bac144fa5e61106c439bda93
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FindWindowExW
SetProcessWindowStation
kernel32
GetFileSizeEx
Sections
.fyfeh Size: 38KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kdqrkz Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upsvgz Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ