Static task
static1
Behavioral task
behavioral1
Sample
fbb319a298a3ee423f8d12961c0f5c6a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fbb319a298a3ee423f8d12961c0f5c6a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbb319a298a3ee423f8d12961c0f5c6a_JaffaCakes118
-
Size
43KB
-
MD5
fbb319a298a3ee423f8d12961c0f5c6a
-
SHA1
90617624456a9ee14d3a44121ca3b6991695edc2
-
SHA256
5fd4ca158cfcfb1f4fa135ecf4e7819d240f6e8e1ed963bdf5399504f0dff986
-
SHA512
17bd96ee26b9fcba70a5088d470635fb5aefa1e3f0812ee74a6bcc53f20e79ecf1f1157e60811db52001e816d1e4128d8cea246f081948b885bc84ffdf87c875
-
SSDEEP
768:i+yN+zkULZLJkTr2iKE9ge8RaUCU5EA/c9BwvDhPXToK0DM6Hc:i+yN+zkc8WiKQmWAknwrhPXTn078
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbb319a298a3ee423f8d12961c0f5c6a_JaffaCakes118
Files
-
fbb319a298a3ee423f8d12961c0f5c6a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
TA�d�� Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�+�o ��M Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
=����� Size: 5KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
@ �Ng�U Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE