Static task
static1
Behavioral task
behavioral1
Sample
fb4c8d5f6b054e6518c6169bd7f9db19_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fb4c8d5f6b054e6518c6169bd7f9db19_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb4c8d5f6b054e6518c6169bd7f9db19_JaffaCakes118
-
Size
613KB
-
MD5
fb4c8d5f6b054e6518c6169bd7f9db19
-
SHA1
cdfb734cb10653ff900fae69177f79c4df8f8986
-
SHA256
15e7c469fefa6b5f103da572dba5d5f979cb7152a83f71b0e6a50c81253b801c
-
SHA512
691cf5ece3791c1cb047a7c7e6ab2d842c1ba27968afdc7761c7aac5b700f5409c6b8db68151a410e8f4890f6bfb2cffbcb225310b9ccb57b1129a85e709c6e1
-
SSDEEP
6144:OfejN9vy9mB/VdlX31br1eEm3mrcpvuB6Smn6Csts:8erZTlX31bs1mApWB6h6Cf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb4c8d5f6b054e6518c6169bd7f9db19_JaffaCakes118
Files
-
fb4c8d5f6b054e6518c6169bd7f9db19_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 376KB - Virtual size: 374KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ