Static task
static1
Behavioral task
behavioral1
Sample
fa885cbf6656759f4fcc2818a4990bd6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa885cbf6656759f4fcc2818a4990bd6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa885cbf6656759f4fcc2818a4990bd6_JaffaCakes118
-
Size
639KB
-
MD5
fa885cbf6656759f4fcc2818a4990bd6
-
SHA1
eb5ee0282d2993d6373da5e803db70f8b42e4242
-
SHA256
9422862b9b73da60432a3891f7ed7b9133824353b30d3c4cb4248f890210e525
-
SHA512
bc3379ed3ab26c13ec472d2b505df9238938cc9d103c7a1820f0e9ecc0affd98ca33eedb99bba489370eed367a9373fefc64d39c19add611b18ec257a9da5331
-
SSDEEP
12288:9A/z9z5AljirkvTj1rjL7pUOB1dcQ90gYaDzl10DvHca8ESIbBuAaQDjJdJ/v:9A/z9wEkvvl7p9vdcQu9aNqDca8E3bBz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa885cbf6656759f4fcc2818a4990bd6_JaffaCakes118
Files
-
fa885cbf6656759f4fcc2818a4990bd6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 638KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE