Static task
static1
Behavioral task
behavioral1
Sample
fb49057a06f8fdce465fc31c61a487f5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fb49057a06f8fdce465fc31c61a487f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb49057a06f8fdce465fc31c61a487f5_JaffaCakes118
-
Size
20KB
-
MD5
fb49057a06f8fdce465fc31c61a487f5
-
SHA1
760f71730a84a75f59679cdc80d680d7d46ca3be
-
SHA256
90f3e4904cbc7418b1f34e3ea8fe30cafc6079f76cd449c6cd275882c84d8b55
-
SHA512
463e5980c90453670de7d7810eb608abad69cbce6db579fcdf7975741646c86a35795771a283e307ecc54ed1146a82f309c2b0bd25905261689f9e6537806b61
-
SSDEEP
384:Kx//w2jLSWQX5QJtnx5T/d1xsthudIv9IAdXFaaIZ:uYELgXEx55sthFv9lxXM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb49057a06f8fdce465fc31c61a487f5_JaffaCakes118
Files
-
fb49057a06f8fdce465fc31c61a487f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
a7333743ef063a68d1d860bbdf1c328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualAlloc
Sections
WINEXEC Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WINEXEC Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WINEXEC Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE