Static task
static1
Behavioral task
behavioral1
Sample
fb704dafc5edad3f520ea394e4485880_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb704dafc5edad3f520ea394e4485880_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb704dafc5edad3f520ea394e4485880_JaffaCakes118
-
Size
2.9MB
-
MD5
fb704dafc5edad3f520ea394e4485880
-
SHA1
16ad194271aa384756122d6ff911da15e3575e6e
-
SHA256
8f9ae604b707a320710e30bb7909eb7aec513ea1893efc0c72597152c151428c
-
SHA512
9c8dfd405b7ca5c00d018662a4a0c289d5e0dfebad86c59817e17e8a2e2e629bd43870a19b8c9e06ce500caab20655c368fa7427f315b2bbdf42c2be978e82d4
-
SSDEEP
49152:2DgcZcCch95UDXF3xbOIkcOS+Cog9qL4IsfyW822GgA2vtAT5ySp+Wn:2sIchLUJ3BbkZS+dggL4IsqW2zAKtATf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb704dafc5edad3f520ea394e4485880_JaffaCakes118
Files
-
fb704dafc5edad3f520ea394e4485880_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
packerBY Size: - Virtual size: 7.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE