Static task
static1
Behavioral task
behavioral1
Sample
fa367430c08bf2533c963e6723bb245c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa367430c08bf2533c963e6723bb245c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa367430c08bf2533c963e6723bb245c_JaffaCakes118
-
Size
147KB
-
MD5
fa367430c08bf2533c963e6723bb245c
-
SHA1
e227fba0ee0c6dec0ec979cd1d244c66765c4669
-
SHA256
c39a2748706d78f091e96ab22b62be9dd2a640b6b88419336cd440fafe82d1b1
-
SHA512
43fe67538ecdc796c01d8922ca54e4330694939ef9f411a982691454a706c2b47986a5d18409471f76a3aa28d651262823eaccee80ad4ad6caa5d398dd527214
-
SSDEEP
3072:jXICiefsfX6SWSMVtgvh5kCDcb4DcH1E4qhJPQOxcY2R97eZ7Df:jXIIfsfK3rVt4h5zI24+xfKY2RdeJDf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa367430c08bf2533c963e6723bb245c_JaffaCakes118
Files
-
fa367430c08bf2533c963e6723bb245c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 165KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ