Static task
static1
Behavioral task
behavioral1
Sample
fb98832e4b9499ba41d0822660a03e4a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb98832e4b9499ba41d0822660a03e4a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb98832e4b9499ba41d0822660a03e4a_JaffaCakes118
-
Size
1.2MB
-
MD5
fb98832e4b9499ba41d0822660a03e4a
-
SHA1
59489a327bc93cac9c5d5137d720f197942229a6
-
SHA256
5bc52b1d234fec24656f55d46e9bb13d67725db7974ecdefb02a0a73d06f1457
-
SHA512
2862cf5e8d9696406a9417b6b96d779f9706b093ddea0f7abf33c30e5bd521ab25416f9bc4da4d493b2c732458c6a7051fdcd28a34f831e28133fdd567ceacd7
-
SSDEEP
24576:swJ6Y/gt6I+StnHR5CStV0yxenK3PyEtz1/ghy:sfy5+5ZtVlQK/yEtz1/gE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb98832e4b9499ba41d0822660a03e4a_JaffaCakes118
Files
-
fb98832e4b9499ba41d0822660a03e4a_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: 405KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE