Static task
static1
Behavioral task
behavioral1
Sample
fbdec6244407022ddf06a86fdd1eecae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fbdec6244407022ddf06a86fdd1eecae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbdec6244407022ddf06a86fdd1eecae_JaffaCakes118
-
Size
729KB
-
MD5
fbdec6244407022ddf06a86fdd1eecae
-
SHA1
3bfd2a9a6737a81802389d35946331019c4fdc33
-
SHA256
6dbbf74b3f535f418e607ea5b5ad88a1a4ff1c3bb32d3f59f4239e087a32448a
-
SHA512
e2f0927a90de96467bbf4cd17d0768706ae788f25b72591f3d7c2283539d338f2864f49ec37c3f742960b989ed2df16ef8f3e02bae910ebbfd21dd053633fe50
-
SSDEEP
12288:p5Ca9Q8zez+Ly3FBu8Uoofdd8zcapevF3Z4mxxjItNxPUrUxDPJBprl:ea9Q8uV+fv9vQmX0tMUxDhBprl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbdec6244407022ddf06a86fdd1eecae_JaffaCakes118
Files
-
fbdec6244407022ddf06a86fdd1eecae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 402KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE