Static task
static1
Behavioral task
behavioral1
Sample
fdd9d59c5674875339c1f9f5c508a7c2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fdd9d59c5674875339c1f9f5c508a7c2_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fdd9d59c5674875339c1f9f5c508a7c2_JaffaCakes118
-
Size
44KB
-
MD5
fdd9d59c5674875339c1f9f5c508a7c2
-
SHA1
b4fe0305cc1ba5ce2bca01c91c920cc14183d379
-
SHA256
bbfdc9ab59ffaed7396e063487d3619b4d189baf5f0003541e59ff594ab15899
-
SHA512
1716cea7f7ca7a991f7b3c1fa7d7ba60cc62703fa017440c2fc4313d0ae2362967db0e6e4919572b3d2f232b44820774a10d656a7e253c5e761d7be3d00aab49
-
SSDEEP
768:FDkDJX2tX/A8ySL7xPrA6LUF4+f6nb3Qw0biVObGPV9qh2Q3U8YVcN:oJGZySLt144+2ObGHxQE8xN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdd9d59c5674875339c1f9f5c508a7c2_JaffaCakes118
Files
-
fdd9d59c5674875339c1f9f5c508a7c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
EiCQ Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EiCQ Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE