Static task
static1
Behavioral task
behavioral1
Sample
fdd9194485bbf63ead8078c2349a6e35_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fdd9194485bbf63ead8078c2349a6e35_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fdd9194485bbf63ead8078c2349a6e35_JaffaCakes118
-
Size
100KB
-
MD5
fdd9194485bbf63ead8078c2349a6e35
-
SHA1
9bde8555267c4e6fcde0b797477b4c7f9e44c987
-
SHA256
57c616b7e2b64a729af05dbbc93cd171ad82da46a2de9e90738c70bb344f5db8
-
SHA512
297900a2fd169b6b6cb6b216ef380fb7401d3385cd2d0e2c7aa5501ac8c7e4eec59eef451ebc9a3feb22366e780345d1057eda0c43e35fd83ceb9126c2bfc990
-
SSDEEP
1536:kn/oH5GXIuXR1plANYO+YLTgmrnIbKwMFUjBGStnif0veg4VQNVlXRSZ283CIrzH:k/25G4GMYOCTp6MpNjhSzrz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdd9194485bbf63ead8078c2349a6e35_JaffaCakes118
Files
-
fdd9194485bbf63ead8078c2349a6e35_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE