Static task
static1
Behavioral task
behavioral1
Sample
fab9630a2925e13d7658868b52f2116e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fab9630a2925e13d7658868b52f2116e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fab9630a2925e13d7658868b52f2116e_JaffaCakes118
-
Size
17KB
-
MD5
fab9630a2925e13d7658868b52f2116e
-
SHA1
6d2904053ab393dc267242933280360b8c92676e
-
SHA256
6088680f067a673b02b7e5821679d9572485c1525a32f173bc864a25e8ca5ba0
-
SHA512
96132a8a57b9a5f4a5a5afe1a90352ec885b8350027268eb3ea95fb2bead084c182e5c30c41f0be87b591244b1c43b40324a04f7f98506d69d06890880fef259
-
SSDEEP
384:EWfjKG8rrqIHKxLCrGrTxhxtJf/m+TAU1a/8Dc9nx+dNL+bDsBOgiBk:EW+VreIQ/Th1a/gc9nZbDVg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fab9630a2925e13d7658868b52f2116e_JaffaCakes118
Files
-
fab9630a2925e13d7658868b52f2116e_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE