Static task
static1
Behavioral task
behavioral1
Sample
fa403868bd812a0a3a1ed4f98337729b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa403868bd812a0a3a1ed4f98337729b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa403868bd812a0a3a1ed4f98337729b_JaffaCakes118
-
Size
141KB
-
MD5
fa403868bd812a0a3a1ed4f98337729b
-
SHA1
8f3a66221fd278ffba11e3a1680a9c231fa23c4b
-
SHA256
ef2fb905462b57f01b91d5c9bafc8d873ff01989e2797c513e9ca68a8ec26bd0
-
SHA512
089c9d67d36a3f0d62fc3a6222949ba06c7b63f125953b31612ef97d3e777cca3e535fe58b9532b09996b5bb26d248f84ad1b8190b9fb7af5863e3a5f11b1e9a
-
SSDEEP
3072:cAhV8pUSSHY6laBhPRnSuKAwyA5hcp/OHa4ChyPLX7CXXG/rCF:l8yV46lEhJSuKAmaO64CkCOrCF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa403868bd812a0a3a1ed4f98337729b_JaffaCakes118
Files
-
fa403868bd812a0a3a1ed4f98337729b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
tqzsc6 Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MLv2m Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE