Static task
static1
Behavioral task
behavioral1
Sample
fbf3e5b3b31f9e10f36c53b888ecccca_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fbf3e5b3b31f9e10f36c53b888ecccca_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbf3e5b3b31f9e10f36c53b888ecccca_JaffaCakes118
-
Size
32KB
-
MD5
fbf3e5b3b31f9e10f36c53b888ecccca
-
SHA1
f91797fd2816c1b8611100e62d60c520fbcdb39f
-
SHA256
149b58838ce00865ea9b70b9d852ef8cf755c54d56446b856d56a4dd5b872d57
-
SHA512
2901b6b715fba3980ad84741800dd7939948902ea2830db7c6e55f30c1b92afed050ec45012d71c1f76246cdc24a84f2ec511d9a89fc1d992b9513e52f34b638
-
SSDEEP
192:TGn3MJANLAh9rMIFlo2g3n073ZQSDMs8dohHF7JTN4kEkI0xph:TGn3M6NgrMyN20zZQSDMsnFFTN4kvN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbf3e5b3b31f9e10f36c53b888ecccca_JaffaCakes118
Files
-
fbf3e5b3b31f9e10f36c53b888ecccca_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE