Static task
static1
Behavioral task
behavioral1
Sample
fb927162de8c7901587648c35de1b098_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb927162de8c7901587648c35de1b098_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb927162de8c7901587648c35de1b098_JaffaCakes118
-
Size
348KB
-
MD5
fb927162de8c7901587648c35de1b098
-
SHA1
3d487e84129763f53bd31dcf6ca0f24cf255e5aa
-
SHA256
48c6931320b73a6dcd1c3717406e8a5d9e30568182b95e8549b0229347ccd95b
-
SHA512
d65695bd12db604281c8eba2d2cce033a85ff66e50f93f4ac9bfe452202bfd89d6203fa3b86b689d4ca490971def49e2ddd987bf4bc4b1514a5327dde45cbfb4
-
SSDEEP
6144:qsHvt9or9q6AOSu4dODIhRK/jBuN9U9Mojbw4hXl2IINWumuJCd:Nt6hBSu4d9RQjP/lVVd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb927162de8c7901587648c35de1b098_JaffaCakes118
Files
-
fb927162de8c7901587648c35de1b098_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.data Size: 255KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_rsc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE