Static task
static1
Behavioral task
behavioral1
Sample
fa10387a576b36f7d73f9b9840105b35_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa10387a576b36f7d73f9b9840105b35_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa10387a576b36f7d73f9b9840105b35_JaffaCakes118
-
Size
504KB
-
MD5
fa10387a576b36f7d73f9b9840105b35
-
SHA1
ad87ac57ebbf5b1f816e0643f68b413488cc9ee6
-
SHA256
6738cd6703b98113e37a67a0bd84fa6e2bafd26adc0765be9d281c2eed940e07
-
SHA512
84cc849bea1d457461ab07c03886afffc7190d5ed1f45504ae64e270baa71909caa6dd5802ed297cb082e62e4f838dc68b0b2b5250c69d0ce99fa6815829ba00
-
SSDEEP
6144:DTi47MdDmnSGcE6m29sxma1HepqpYP75jJFpbASU9yblr2WJRNGMYil:DTiFSSGcE6xKEzFpzvhrPgLY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa10387a576b36f7d73f9b9840105b35_JaffaCakes118
Files
-
fa10387a576b36f7d73f9b9840105b35_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ