Static task
static1
Behavioral task
behavioral1
Sample
fde6b622da8b4a341fd5d646dc156432_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fde6b622da8b4a341fd5d646dc156432_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fde6b622da8b4a341fd5d646dc156432_JaffaCakes118
-
Size
368KB
-
MD5
fde6b622da8b4a341fd5d646dc156432
-
SHA1
14828a8aedba0ea0ab4779ea5928d18fd5eba072
-
SHA256
054a1b2aa73b29ad64e9d790e64495a5e1402acd819b5d6cae60cbfe47a2a22d
-
SHA512
99f5170342350d27ebca65bfe402fee985f76e7b32baf42def6b5d4bc6cd80e2318eadca70623f0e4786f02dd904b50480a73792db4a26c8441491eed8c952a9
-
SSDEEP
3072:q4WTHhtHe/J8h9F+hPIxxbIu2XSct67+pWO:bWe/JU9F+1qIBtWK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fde6b622da8b4a341fd5d646dc156432_JaffaCakes118
Files
-
fde6b622da8b4a341fd5d646dc156432_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE