Static task
static1
Behavioral task
behavioral1
Sample
fab0515ac04500d06689a69fb616304a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fab0515ac04500d06689a69fb616304a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fab0515ac04500d06689a69fb616304a_JaffaCakes118
-
Size
432KB
-
MD5
fab0515ac04500d06689a69fb616304a
-
SHA1
2f12af51a99701bfa5fa07f39d77d3983da68556
-
SHA256
4fa7c220d075f923469b635e6a95554d5274f1252448e42bd492530bf74913fc
-
SHA512
bafc9c16010cc5172a4f5a8f58c924bbe13892c917b42765cb5cd6439c13095d75abbfea6557de8c16db32dcfd387ad81563503747b3bc176e7e58d0990f73ad
-
SSDEEP
6144:KUmGdVgYFHx3f14FoskrHj79E1kZRQis3jWDT9Fn5bASVy2wQXbM35:AkVgMxP6Fo/bakZ+isTWrn5HaQXbM35
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fab0515ac04500d06689a69fb616304a_JaffaCakes118
Files
-
fab0515ac04500d06689a69fb616304a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 278KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ