Static task
static1
Behavioral task
behavioral1
Sample
fdea5f1db96453ea7c4c8abafa06f9e7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fdea5f1db96453ea7c4c8abafa06f9e7_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fdea5f1db96453ea7c4c8abafa06f9e7_JaffaCakes118
-
Size
16KB
-
MD5
fdea5f1db96453ea7c4c8abafa06f9e7
-
SHA1
bfb7bfb45787697bf25c1dc5530bfd1f6915337c
-
SHA256
a0f13d1f5a9d47aa766ed5eb63f2d41a7da7af390abcb63680113fa85410bdb0
-
SHA512
0cd6e03d2980778fe80c42de6a0470d814441754322b187a5c2b4e9aedbecbd388815bde8f899da6c1f80ec52804838cbd285ab4e61f6b2dd63ca37dc2337c8b
-
SSDEEP
96:/lx3woOoQtG3siRTZ9azAyDjHcC57VYzpz1kkuTRVa7gi8fTvdE:/TgoOoQc8MyDTX7VYzV1kkuT6ZkxE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdea5f1db96453ea7c4c8abafa06f9e7_JaffaCakes118
Files
-
fdea5f1db96453ea7c4c8abafa06f9e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE