Static task
static1
Behavioral task
behavioral1
Sample
faafa395702f42e5b80a613098794a5d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
faafa395702f42e5b80a613098794a5d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
faafa395702f42e5b80a613098794a5d_JaffaCakes118
-
Size
17KB
-
MD5
faafa395702f42e5b80a613098794a5d
-
SHA1
6119ce8c08cdb4546cd5369a0890efb6d115a7ae
-
SHA256
9d04657a8e635fc1797ccad0ba4e0e205213a42fa17b866fce9acb9a9128ba14
-
SHA512
1184a0daad384178efe07a234fb06bd9ef852192b8786ba9e7006c65c05ea120f143585bb51df3cf9e0162047c29dbf0905888adcfb38411dd05ef7afd2081fc
-
SSDEEP
384:mx1W/W4aBGOuCRSrMbRqCtmQmb19dokArIw6gMD8FEIYOnZaG65B3:KTnRr/t6b1PokFwD+ZZOZ85B3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource faafa395702f42e5b80a613098794a5d_JaffaCakes118
Files
-
faafa395702f42e5b80a613098794a5d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�^940 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�^941 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�^942 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE