Static task
static1
Behavioral task
behavioral1
Sample
fa51241df3b62ab1f25b1b6a831f4899_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa51241df3b62ab1f25b1b6a831f4899_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa51241df3b62ab1f25b1b6a831f4899_JaffaCakes118
-
Size
611KB
-
MD5
fa51241df3b62ab1f25b1b6a831f4899
-
SHA1
e5d2d3a9d0f426852f68fafc2ec944599ae8f6ca
-
SHA256
46f9e23c08c0b7297e10401c801f60b703cd046755cd0e4af8529625d28b1dfd
-
SHA512
c20af5f765bda487deed6dcb35b44a93dbf100097320f50d670e9f6e2cd4caeb3d39c8671b708d35b0391b162354dce5fd90de44fe5a695eae158f71311a86cf
-
SSDEEP
6144:guo+KKG7Gb7cl7Ycl78tAKKG7Gb/cl7wcl7hcl7Ycl7eTGrGLKbRLAJNa+TctAPC:l6PT8i6pLKT0Ls+TctAaSB6PTP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa51241df3b62ab1f25b1b6a831f4899_JaffaCakes118
Files
-
fa51241df3b62ab1f25b1b6a831f4899_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ