Static task
static1
Behavioral task
behavioral1
Sample
fbef4fff6fdcca2c16a9e4977c568aa7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fbef4fff6fdcca2c16a9e4977c568aa7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbef4fff6fdcca2c16a9e4977c568aa7_JaffaCakes118
-
Size
2.7MB
-
MD5
fbef4fff6fdcca2c16a9e4977c568aa7
-
SHA1
bd3da7572285e79947c6bbab04f368084b1cd84f
-
SHA256
097a7c94adb3ce4a779aa3b57509a64d40ccf595cb4ee01146afd39a2df07060
-
SHA512
fe7448f0cf379e42e7030b2044fa7cc34510c0a0dbbdd5812412930de5f303ab65011172bcbe3900f3ac3ed384b2d5ef6f2ec46b127188820218cf6a1e79a5e9
-
SSDEEP
49152:s+lvEHBs59QnpqpP7vyYUtmKP5atqP8KXrNHo2ZFIUCKw:s+eBzSvy3mwT7xDZFPNw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbef4fff6fdcca2c16a9e4977c568aa7_JaffaCakes118
Files
-
fbef4fff6fdcca2c16a9e4977c568aa7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.xh4uzv Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yayqbs Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.webpxt Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.null Size: - Virtual size: 3.0MB
.adata Size: - Virtual size: 416KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.engine Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE