Static task
static1
Behavioral task
behavioral1
Sample
fa8a39bd7abcae95c2d709535f5b04c4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa8a39bd7abcae95c2d709535f5b04c4_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
fa8a39bd7abcae95c2d709535f5b04c4_JaffaCakes118
-
Size
41KB
-
MD5
fa8a39bd7abcae95c2d709535f5b04c4
-
SHA1
e36e7462f815e63e79c5f1c3857c2c3268085134
-
SHA256
1c1d6bfc02d867286e5027eebf57fed8691b3bc34bb130764ae962a819893400
-
SHA512
ebbeb81d003075254840634fad05288e05b6fbc0a6510ee8852f6ba6f03e00c4e20f351d0bbe233edfb7362cb1e3dc7a60d9253ca2b4cfe6ca4e999c76f375a6
-
SSDEEP
768:p6mmwHDM5XHuKDM8VJwPpZ613Zr/pK1nY41Isiit3NDMNXx42+FSF6a9Oq/HBU:p6mmwHDM5wypjU1Y+tNc59/HBU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa8a39bd7abcae95c2d709535f5b04c4_JaffaCakes118
Files
-
fa8a39bd7abcae95c2d709535f5b04c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.itext Size: - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 200KB - Virtual size: 475KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ