Static task
static1
Behavioral task
behavioral1
Sample
fde4dfbfbb5e5c757574861cd3827ccf_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fde4dfbfbb5e5c757574861cd3827ccf_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fde4dfbfbb5e5c757574861cd3827ccf_JaffaCakes118
-
Size
339KB
-
MD5
fde4dfbfbb5e5c757574861cd3827ccf
-
SHA1
4df3aaa32b1d7290d800d3ac32198276d724c88c
-
SHA256
d4f8b5f1fb77101a6b9e01cfedbb237fd783e9cf13f11e7a4e32726a4d486bdd
-
SHA512
81fb425ff47166702fcbb8c4a7964eb05e6cd44a7d1d9735dd18a0024e12c3a8247843e279ea341b4790af3b7601a72a0bacad8c0a60878147418e3436072cb5
-
SSDEEP
6144:23eQZdmj9ZrPfuv4A1oM6vfCttq9TKtRDkIgOSKZXFcHRJouCb6jra:5QLmphWVAlUkIgOSGXF2RJolYr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fde4dfbfbb5e5c757574861cd3827ccf_JaffaCakes118
Files
-
fde4dfbfbb5e5c757574861cd3827ccf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 338KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE