Static task
static1
Behavioral task
behavioral1
Sample
fb6e350ac1be86bc7d38fcc3539df44e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fb6e350ac1be86bc7d38fcc3539df44e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb6e350ac1be86bc7d38fcc3539df44e_JaffaCakes118
-
Size
68KB
-
MD5
fb6e350ac1be86bc7d38fcc3539df44e
-
SHA1
6a393ffff69881c201075137a78c5a1b046e3632
-
SHA256
ae0a1c7d701a41d02532e1ce8f716a8b6bd5c92567f39c278fcf9f22209a1d5f
-
SHA512
f7a8522039a4f511f52c3b8bae601df4f9af02cdac709bb9f15cab2b39bf3fcc74052af6f2116cf4761c3b63a625cf33027e9c7a4805689ef31de9d108f619c4
-
SSDEEP
768:lq19X3jo7NUcM3IGDuPbAjvxGMO+gd2yQSiGDiB97z8gTf8AImwS+rW6u6i63:lqDo7Nm6JMOZYyjyV87S8WG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb6e350ac1be86bc7d38fcc3539df44e_JaffaCakes118
Files
-
fb6e350ac1be86bc7d38fcc3539df44e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE