Static task
static1
Behavioral task
behavioral1
Sample
fac42d356b61b6b172da7081dfae499f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fac42d356b61b6b172da7081dfae499f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fac42d356b61b6b172da7081dfae499f_JaffaCakes118
-
Size
25KB
-
MD5
fac42d356b61b6b172da7081dfae499f
-
SHA1
39d2b6fd529a57af5e323506239e0cc3115d2c1c
-
SHA256
f451e977109758ab741d428b10df9dd23c4bef7ca46b7536f6eb4e8cbd726e9a
-
SHA512
a59a6cc09a48ec03eba1b20df20587a83a60b900aea8d616c17577e92dc3928f5b36c99cee1364bc86fefd4bdae7a87ed494afa8a1690383b69eb5c51c4f05e0
-
SSDEEP
384:TI2ZeXHnrUWf70vgq/WAu4ZB6Ua9oy8tiPSA8WoiIHVNjMPMZREuUMZc2MZGbuCX:T9Env70vPWL416GA8WoVy12J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fac42d356b61b6b172da7081dfae499f_JaffaCakes118
Files
-
fac42d356b61b6b172da7081dfae499f_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e58d0c080fff3efd1b29d3331696cd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
Sections
gx�T�X�� Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
8T����; Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
#����F Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ