Static task
static1
Behavioral task
behavioral1
Sample
fbd9481b50295aec5523648d419b8fda_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fbd9481b50295aec5523648d419b8fda_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbd9481b50295aec5523648d419b8fda_JaffaCakes118
-
Size
70KB
-
MD5
fbd9481b50295aec5523648d419b8fda
-
SHA1
4244e69ad395eb9aafb14c1eb48784b37f10fc5f
-
SHA256
2f91dc7f4ce7047d8a2b3ad3734bbf2046f778afd7a1698a2cbd6f220fb2bf78
-
SHA512
14391459896ac807baac3297be7c46d259b3cbfc46a6909b0c83bd203ebb5afe58252464c8e27a3096c5d9462d4eb119998ce2eab6bd767ce2951474419f65eb
-
SSDEEP
1536:EjS5/sEQoMbjKUzbZg1PjNsdQzw1J+dDtxIS2pL9q:hsE8pZg9jNTzKJ+dDtxl2u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbd9481b50295aec5523648d419b8fda_JaffaCakes118
Files
-
fbd9481b50295aec5523648d419b8fda_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
DINGBOY Size: 512B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DINGBOY Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE