Static task
static1
Behavioral task
behavioral1
Sample
fa6c6e4b55afd87a7856068ec116f845_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa6c6e4b55afd87a7856068ec116f845_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa6c6e4b55afd87a7856068ec116f845_JaffaCakes118
-
Size
248KB
-
MD5
fa6c6e4b55afd87a7856068ec116f845
-
SHA1
2448a0a757076b2e7ba308bfffa1b3fd1a69a9d5
-
SHA256
cabdb5df11a6a03f536db767afbae2cb2db75b9ace87c94747e115b45b271de9
-
SHA512
947c30a2c3c872f7ae1f28b121c780059448cc4b3125e793a16015a068f15aabebf8a0b72ff0a850c739de91935e4b768b15ea773e71ef7346baae3b8435324e
-
SSDEEP
768:19EeJxyzeL7bOVlV9Nmxl5NPPJlOaF2+R1QSqolP59hJ6sYbYtFQb4O9akueq:fOVl5mxlzHzVF2+ISrhvfl/7cX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa6c6e4b55afd87a7856068ec116f845_JaffaCakes118
Files
-
fa6c6e4b55afd87a7856068ec116f845_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 248KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE