Static task
static1
Behavioral task
behavioral1
Sample
fa12b89c19181f86843566e6979dedeb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa12b89c19181f86843566e6979dedeb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa12b89c19181f86843566e6979dedeb_JaffaCakes118
-
Size
228KB
-
MD5
fa12b89c19181f86843566e6979dedeb
-
SHA1
7548a599ee302a6591844fa8ed19671c4179d182
-
SHA256
2612b997c627398f209048c786e019e42693bd44aa61c4ead4dcd0e8f9c838c2
-
SHA512
6aa8014f2d7cf9e7195ad3112fa380e8ee224735513a11910f93c779edc8d7b2e53724189265ec59d8be572b17897fcf34a8e5a3350b1498577d5cd80de0616c
-
SSDEEP
3072:lHNoOO+BC3K5eqXIwblFLpvtxSd3Tr1rc8OlASLaHH+6wZCkcC78L1QcJ:lbeK7YMrxSd3/a8OHce6pl1QcJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa12b89c19181f86843566e6979dedeb_JaffaCakes118
Files
-
fa12b89c19181f86843566e6979dedeb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE