Static task
static1
Behavioral task
behavioral1
Sample
fbadea38434bb9457934bceeb709d208_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fbadea38434bb9457934bceeb709d208_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
fbadea38434bb9457934bceeb709d208_JaffaCakes118
-
Size
15KB
-
MD5
fbadea38434bb9457934bceeb709d208
-
SHA1
1bee1fab7515862bf9d842727846a49af5cfc76d
-
SHA256
b450ed573de4c010bed0cd04ebcf46aaba1f3a25d516d875e78adf1f02492f83
-
SHA512
a26d3cd334be6d977f2525e6d78865ff650813d12c4952a56b7e74c64cb0eef427582c45c01b500a8de0ef761200a6d984ca5e6aba01b894c9745e2d5417f76b
-
SSDEEP
384:IG76hILi9wMQT0qe3oguCqLvISsQc7F64tf1s7ilomBIlgXT:qhILuqe3DutvIDF6U1s7RmBVj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbadea38434bb9457934bceeb709d208_JaffaCakes118
Files
-
fbadea38434bb9457934bceeb709d208_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE