Static task
static1
Behavioral task
behavioral1
Sample
fb9826bd168eeb4c00d39fd49b993a64_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fb9826bd168eeb4c00d39fd49b993a64_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb9826bd168eeb4c00d39fd49b993a64_JaffaCakes118
-
Size
68KB
-
MD5
fb9826bd168eeb4c00d39fd49b993a64
-
SHA1
4d9594e44a63df1f1206972b69544e32cde43e3a
-
SHA256
722a0037f4544ddab2b212533cbe71e5c78f7e5005a8b41a7631fae1e3e85f47
-
SHA512
4ac069f35039005e92c7ec3dde21bbc42d43c070008664272ba0497b6c42b6f78c4919914d37a18c032e17f41e709715184c5701135e2caeb9cc25be692aee94
-
SSDEEP
1536:ZzZWBsk285tPQKaDEtzvYKNmBs93dtx9d6jOwpxA9JClP4xzZ+t1SIqC:gskp5tPQKaDiYKNm03d1d1wpxA9JClPc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb9826bd168eeb4c00d39fd49b993a64_JaffaCakes118
Files
-
fb9826bd168eeb4c00d39fd49b993a64_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e58d0c080fff3efd1b29d3331696cd7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
Sections
M��I��� Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
`(���Q�. Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ