Static task
static1
Behavioral task
behavioral1
Sample
fa94d6e64ea125db15e4c827646775ee_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa94d6e64ea125db15e4c827646775ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa94d6e64ea125db15e4c827646775ee_JaffaCakes118
-
Size
68KB
-
MD5
fa94d6e64ea125db15e4c827646775ee
-
SHA1
bd5d9e81ff50b996bf808b32e6847433ca906d4a
-
SHA256
097ea8115fc3e7d930fda3b94cb776a1fc51e2c59b120d0b3fbacef05448480e
-
SHA512
17e204711be361b6b83ee98d991eb9f31c1eb4c5fd32f80ab062bc572c638e48d6fc5fc9d129faad670acca0bc16c3b2a17e88dba98571d5f0a62d4166426b49
-
SSDEEP
1536:X4aIyn1UebFWtLwCtHfjGamuMznublIC3mwAfft:IaIY1hBWpPHf8uMjDrft
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa94d6e64ea125db15e4c827646775ee_JaffaCakes118
Files
-
fa94d6e64ea125db15e4c827646775ee_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
�0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�1 Size: 67KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE