Static task
static1
Behavioral task
behavioral1
Sample
fa5013f9e404e9470f0cc4adbb39d943_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fa5013f9e404e9470f0cc4adbb39d943_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa5013f9e404e9470f0cc4adbb39d943_JaffaCakes118
-
Size
239KB
-
MD5
fa5013f9e404e9470f0cc4adbb39d943
-
SHA1
db381cf5b3a0cd41a0d72ba006641e03ec714363
-
SHA256
86bb4f8a80d36ea60d4edb7067202b41ffadd06999cb9a6a38000e5a10acd419
-
SHA512
25c786393cef4856f811b3f0de3c5974ff43482de1bf441b140f9b9ec90713f8c58e0ab2f925310d0622095759e30d116eb7e05b202d6711cfb37677ad47b3dc
-
SSDEEP
3072:zEn+Ic28/DK2gghU9dF1GLQp/zM2CDwYPE3jtipmMhtWi05rSw2zNVnCjAmvwS5z:dfrw7GL4rdYM35ji05rl2R8rvwp3V6t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa5013f9e404e9470f0cc4adbb39d943_JaffaCakes118
Files
-
fa5013f9e404e9470f0cc4adbb39d943_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 238KB - Virtual size: 243KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE