Static task
static1
Behavioral task
behavioral1
Sample
fb653b79d84ac22b2bc8f054ceddb6f7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb653b79d84ac22b2bc8f054ceddb6f7_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
fb653b79d84ac22b2bc8f054ceddb6f7_JaffaCakes118
-
Size
763KB
-
MD5
fb653b79d84ac22b2bc8f054ceddb6f7
-
SHA1
183146df25f7176b20facbcd8b68f205b9f1c7c1
-
SHA256
1f6259782b694da9b2a6f227562278b30b388d6a7114f66c70ca659d793ddb1f
-
SHA512
9c3a58b9895b201ab507ccbd0c06882dd74a27059a5b865d2f45ecd7a7319ebc9a5e106f82855e8d4b6ed584aca851c9313e8a2fe633002e18ae598e20284282
-
SSDEEP
12288:JJFZqYMOaQ0q9nV/zsnK23KHVI6nodVdyMLiqyVcxwtVxgpMiuzOT6i32QoO9udP:fFZqhOBnVyK23C6OoYMLiVcKtVx4Miu9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb653b79d84ac22b2bc8f054ceddb6f7_JaffaCakes118
Files
-
fb653b79d84ac22b2bc8f054ceddb6f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
test Size: - Virtual size: 988KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 625KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE