Static task
static1
Behavioral task
behavioral1
Sample
fbe98813e8a1f085c10406b8d552dbbd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fbe98813e8a1f085c10406b8d552dbbd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbe98813e8a1f085c10406b8d552dbbd_JaffaCakes118
-
Size
308KB
-
MD5
fbe98813e8a1f085c10406b8d552dbbd
-
SHA1
0d2ca885a79e9cda981291f8f100ce072a617c25
-
SHA256
c260dab94706ff18951d3db71310dd3b3989c275fe53b480bd503acba05678e0
-
SHA512
eb26a19a264459bd2e948a7dc118408538630d606702190e96e52cc28b60e15ed311d85d8179e25987d8500e4dc30a5bab2bc3669b551d967d16cf57b21cd59e
-
SSDEEP
6144:eL5DwZY0oi/R3+s7Z8/hYFxInaxufD7kPw6R8K7K1LfhDCa3cekpe9u:eu+AxhKmLInaufMIPB0icFe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbe98813e8a1f085c10406b8d552dbbd_JaffaCakes118
Files
-
fbe98813e8a1f085c10406b8d552dbbd_JaffaCakes118.exe windows:1 windows x86 arch:x86
5638b98cc34e5501e11e392eaec0b529
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
msvcrt
exit
opengl32
glPushMatrix
ntdll
NtCurrentTeb
Sections
.text Size: 199KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 908KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ