Static task
static1
Behavioral task
behavioral1
Sample
fbc2799348edd5d9ff9058853cb2b8c4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fbc2799348edd5d9ff9058853cb2b8c4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbc2799348edd5d9ff9058853cb2b8c4_JaffaCakes118
-
Size
692KB
-
MD5
fbc2799348edd5d9ff9058853cb2b8c4
-
SHA1
f1620e251435c86d4ab361b39d6b85da0c89d565
-
SHA256
4c541363a3d72c96d5d2adf7e864b1faabb1bc612171cf4de13acbb38788940a
-
SHA512
ef0fc86f216db579ceb26bd8839839e722f8f54393e487f078daec41c9bf11a7077f93b43004900cf2cc232368935f263163a284b7384181c99a8556f678c06c
-
SSDEEP
12288:khDJXIUrmx+sQZtp2a6q7fzq0eqvVWqz72UwPftjVWvgOHD1qecAGuA:khdX35sQZ7l9LzLeqvVPz72xCvZ3zGu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbc2799348edd5d9ff9058853cb2b8c4_JaffaCakes118
Files
-
fbc2799348edd5d9ff9058853cb2b8c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 228KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 448KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE