Static task
static1
Behavioral task
behavioral1
Sample
fb7605c4b1c0182f58bf0d3c1082d34b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb7605c4b1c0182f58bf0d3c1082d34b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb7605c4b1c0182f58bf0d3c1082d34b_JaffaCakes118
-
Size
83KB
-
MD5
fb7605c4b1c0182f58bf0d3c1082d34b
-
SHA1
903e46772fbbf21bd98da45591b7027190e49d07
-
SHA256
57c0c6118ea522d14485e6fdb5ccadb2a50ea03b5563ee240f453568f8a63acb
-
SHA512
dd8d95284041bdbff13951c19a8cc93f706a08795f6a48ac671bb6154ab069edf12ecc022aa0d8b8ef0522d93ce5d901bfc7c904b903ca75c1a96a5cf94d9f4b
-
SSDEEP
1536:XO+I6Qwjmkk2e3Kol4VP7uSOqd20PGxFKzf170L5:ICM3KomVPSLO20O/Kzf2l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb7605c4b1c0182f58bf0d3c1082d34b_JaffaCakes118
Files
-
fb7605c4b1c0182f58bf0d3c1082d34b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 662KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.6MB - Virtual size: 19.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ