Static task
static1
Behavioral task
behavioral1
Sample
fb6f8290c164ec4dca28d330b9110e71_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb6f8290c164ec4dca28d330b9110e71_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb6f8290c164ec4dca28d330b9110e71_JaffaCakes118
-
Size
6KB
-
MD5
fb6f8290c164ec4dca28d330b9110e71
-
SHA1
b4a582aa85dd9b0ba0d9288e2ebdc48790572b85
-
SHA256
7eb3eafa26b11f3caa8a74b926d226933c9b4b98aaac7ae285ac5633463d2ece
-
SHA512
e356f229c6e6c46e878fae270456662ed2f803d7f0e2576e5e6aa5c03bc296b691752ba314ff04436767306a5ab04fbb3911a54f789afeea561219641e4c9c77
-
SSDEEP
96:IJEdlMoIHgBkxKZ1G6A78tjNHLzJWAYox69mB1KkgcwQwTp:Ie8+kxKZ06LtBHL9WAYoM9mLKkgUw9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb6f8290c164ec4dca28d330b9110e71_JaffaCakes118
Files
-
fb6f8290c164ec4dca28d330b9110e71_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE