Static task
static1
Behavioral task
behavioral1
Sample
fc283d0ae8227a7c1da70eac8cb214b8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fc283d0ae8227a7c1da70eac8cb214b8_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fc283d0ae8227a7c1da70eac8cb214b8_JaffaCakes118
-
Size
44KB
-
MD5
fc283d0ae8227a7c1da70eac8cb214b8
-
SHA1
de882d924d9dfd345de8d27bd0aace51ba0ff699
-
SHA256
825e2f57c04b17ad05327e0361625e0b56241d5c3041bf9f71be3726abd3ebd3
-
SHA512
faa6fb555e71dbdb7813f1840dc15990b238b259af7b386f4c2f45a2aca0e3a048af3b116e191f55508cdd3de0221eabd9cc5c8a981710aac196a1ee7e0e8dd3
-
SSDEEP
768:/4wUvo04tCCF+4GLzaYhSKgpGghuwmeCCs+qCfXIC3Z8C7ALO:AwT044CTvKgpGghuw7fXIa+C7sO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc283d0ae8227a7c1da70eac8cb214b8_JaffaCakes118
Files
-
fc283d0ae8227a7c1da70eac8cb214b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ