Static task
static1
Behavioral task
behavioral1
Sample
fa48d063e64618e5d078cbf43001db3b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa48d063e64618e5d078cbf43001db3b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa48d063e64618e5d078cbf43001db3b_JaffaCakes118
-
Size
2.1MB
-
MD5
fa48d063e64618e5d078cbf43001db3b
-
SHA1
ae6bca2a04eb3b452e77fe002ac720ad0e582a85
-
SHA256
432d8bb4ff8edb5b6e343383be9e623a4ec62cec12e32498bf01c1c582bc9e44
-
SHA512
99defe951252da9f74fd96cf2cab4eb1264c7113d45f35368798b30531fcb1482f66e2015fd2bf679b17c3a83b00c088d7979ab30ecfccd5cd5d59f2c76e543f
-
SSDEEP
49152:C5GsqwdIgnVkcaRZTWCj/nRD6bRksWSygORgWdhA4c6:C5GsqwK0/khWCdoRksJkJ04
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa48d063e64618e5d078cbf43001db3b_JaffaCakes118
Files
-
fa48d063e64618e5d078cbf43001db3b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2.2MB
IMAGE_SCN_MEM_READ
.text Size: 263KB - Virtual size: 264KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
.text Size: 17KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ