Static task
static1
Behavioral task
behavioral1
Sample
fbb41a08166fc4eadcb1d26a70f37c6e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fbb41a08166fc4eadcb1d26a70f37c6e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbb41a08166fc4eadcb1d26a70f37c6e_JaffaCakes118
-
Size
20KB
-
MD5
fbb41a08166fc4eadcb1d26a70f37c6e
-
SHA1
c51c9528935ca028aadcbe9aa31dd3ca10f624cf
-
SHA256
a7189e1f44c9db9b4922d833a5c12a6932fc6f176147dcbd5d7f66ccbcaaf918
-
SHA512
e64fb2c647a24d8c236c4ae037a8c4b33435e593bd78aaae5676ef57a829e9c611e7c998ddcdfaa6f4af2e72781ed97cdf921f78d16961f32f04de7cd94e51de
-
SSDEEP
384:CY4YMymdIX/sD+jOmpGPH5TnKpPAdJfbP3nl82JxhfZRC/JDm:1M60D+ia0Zmps9bP3ykfbC/dm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbb41a08166fc4eadcb1d26a70f37c6e_JaffaCakes118
Files
-
fbb41a08166fc4eadcb1d26a70f37c6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
fa399f464e4976031f29603ed2f99325
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
InvalidateConsoleDIBits
ReplaceFile
lstrlenA
GetProcessVersion
GlobalUnfix
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
itext Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
text Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 1024B - Virtual size: 628B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ