Static task
static1
Behavioral task
behavioral1
Sample
fae936d15b3f8a910f14765f2d580ba1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fae936d15b3f8a910f14765f2d580ba1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fae936d15b3f8a910f14765f2d580ba1_JaffaCakes118
-
Size
79KB
-
MD5
fae936d15b3f8a910f14765f2d580ba1
-
SHA1
afd810a6d8fc1be0b590d52d006a0adc3cdae3da
-
SHA256
403d22b1e6bc21ce6924ff3975c3abe412ce4fddf8c081e8842bd5b531740927
-
SHA512
be9a38e09c2901d90e06bf233f3401fbb78638362c5fe128104e9b44eb5df2fc882fcac1a6ecdefd1c566bcaef43d2226c6d24633a6e43df2401401180e64ffb
-
SSDEEP
1536:ty+PWDO80FPJKHZYWRna9VGvIZOj/dlQljezcAJlVTA5VxG9ZxKil1ZQdSUl4u:ty+PWLyPlZqvCEl4ez7l2Vx6dl1Ev
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fae936d15b3f8a910f14765f2d580ba1_JaffaCakes118
Files
-
fae936d15b3f8a910f14765f2d580ba1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ASPack Size: - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: 576B - Virtual size: 575B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: 678B - Virtual size: 678B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE