Static task
static1
Behavioral task
behavioral1
Sample
fb26c6ef732050a9994391c4a00516c8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb26c6ef732050a9994391c4a00516c8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb26c6ef732050a9994391c4a00516c8_JaffaCakes118
-
Size
101KB
-
MD5
fb26c6ef732050a9994391c4a00516c8
-
SHA1
babe43487898fadebabfa1445dc805932732287b
-
SHA256
9e474506bfb842c68c8592a56b419b5a7be9a9b531ec202a0027342b5c7569f6
-
SHA512
0da7e8855d84b0cc0d447f9663dced51ff7a9247998dca940fea801b639a8449d6f7568fe5b60261dc1cdf7eda0001476aa8535aec499db9ffa0507c06ec20c6
-
SSDEEP
1536:F4Tq4DWeK5j1PeQQqt1UeD+B35vfe91kqFjdvhxGolhtG6v19mEkAfSeK0O5R:+Tq4DnKfPHXSvfGnRhdh5JkA6td5R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb26c6ef732050a9994391c4a00516c8_JaffaCakes118
Files
-
fb26c6ef732050a9994391c4a00516c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
91851b1b899918807bc05a82e5cddaa3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateActCtxA
ExitProcess
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualProtect
ActivateActCtx
Sections
.text Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE