Static task
static1
Behavioral task
behavioral1
Sample
fbc666f7d1db5f8243aac35d2bfcb626_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fbc666f7d1db5f8243aac35d2bfcb626_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbc666f7d1db5f8243aac35d2bfcb626_JaffaCakes118
-
Size
420KB
-
MD5
fbc666f7d1db5f8243aac35d2bfcb626
-
SHA1
0758bad94f92dc5f64f89efc2f5163dd84302ae7
-
SHA256
4b93c45d795ab76f848f54f73544c9939a782ccdb7cd8e025c1c6c0c605b26b0
-
SHA512
82f261b98c132954a9c3cb50d8295879f4853a896238653ba573273e64aee65e8d35309aeb51a6f1e29f9e9f3e3a91f4af6ad1a93398ce9069fe7b4684234998
-
SSDEEP
6144:/szfZtGnbbIAdQ541msctvl/mZsW63E+NRBXBPHiWEhBkKMvy7qPCzqEMgsmOIaY:cfZkfdQ5IktdZDFBPC7IyTivmXbtrFck
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbc666f7d1db5f8243aac35d2bfcb626_JaffaCakes118
Files
-
fbc666f7d1db5f8243aac35d2bfcb626_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
DATA Size: 344KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ