Static task
static1
Behavioral task
behavioral1
Sample
fa3d41f4114454e4e647f0fc87fe3855_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fa3d41f4114454e4e647f0fc87fe3855_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa3d41f4114454e4e647f0fc87fe3855_JaffaCakes118
-
Size
70KB
-
MD5
fa3d41f4114454e4e647f0fc87fe3855
-
SHA1
c7776c143fb7474a523a80a1a5882d4d4171e688
-
SHA256
8ae02b0afe0ed2b91ce84bbe6a59085c93e1f563c6a62567fa468595dd85df0b
-
SHA512
4892727ae144433b1aac8380853b45a154db1bbaca120264af971b280d84ad7c471d78e22b15422e7acf942bdaa9f8706a7940bf53d0cadcc9af375acab1e5f9
-
SSDEEP
1536:FJitmyFg67Mio7Um9kAIzLae/TazpaaxJ1gI735JzOK+54LYRBRt60EwWG:FXyK67buCrvaeKaajv9JiK+Ugt6zG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa3d41f4114454e4e647f0fc87fe3855_JaffaCakes118
Files
-
fa3d41f4114454e4e647f0fc87fe3855_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c372311534116eeffdf56f3f6c69c5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
ExitProcess
GetProcAddress
user32
wsprintfA
MessageBoxA
Sections
.text Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nPack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE