Static task
static1
Behavioral task
behavioral1
Sample
fbd3a23c12222cc372b180099233ed06_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fbd3a23c12222cc372b180099233ed06_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbd3a23c12222cc372b180099233ed06_JaffaCakes118
-
Size
174KB
-
MD5
fbd3a23c12222cc372b180099233ed06
-
SHA1
9877ed69ce57f2a8edb7b34134274318c7c1b91d
-
SHA256
853acab9414e62684454ee12c10d106140faa4d3651d413033166dcba91aef12
-
SHA512
4934dc55021401256ef3932b81e3bbdbd95a9566006578c1e7ea0870c491ff01d38502d77686a317ba6e54950bab00aa07687e303182e024bc9c3cf7d68a42d7
-
SSDEEP
3072:dvW+EFE2UBFCtmzU+FQL0bumPCcvw1mJ/99UsoACug5EJjir/pVL4XiICuo:AnFE2iFCotEmPCQw1KV9roACugwOf4XX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbd3a23c12222cc372b180099233ed06_JaffaCakes118
Files
-
fbd3a23c12222cc372b180099233ed06_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 159KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE