Static task
static1
Behavioral task
behavioral1
Sample
fc2cb2798d11fe9b97538ed81211b5a0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fc2cb2798d11fe9b97538ed81211b5a0_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fc2cb2798d11fe9b97538ed81211b5a0_JaffaCakes118
-
Size
355KB
-
MD5
fc2cb2798d11fe9b97538ed81211b5a0
-
SHA1
de0b3d41c97e95dd5e7084d931543818a6075e76
-
SHA256
e6edadc5f0eb73eb689ef900b14c008a694cc9ba6b7948c38f67ab2cf5c42a32
-
SHA512
6ad4de92a3ea340f0330f68e85ce2a7a32da33b4bfa973c2e36be8efdf584c5e59459a3615060b6aa0ccf473acbbc00b58ad07e83e3e55584a458912ae3c20f3
-
SSDEEP
6144:/xrKJ8cVTyDDAM2Ua3UbF50crbHZjb1Vz8JqsPW903O6+ZShfCgAZZ:EJcDPbF50crb5jb1VgJqZ9XShfC/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc2cb2798d11fe9b97538ed81211b5a0_JaffaCakes118
Files
-
fc2cb2798d11fe9b97538ed81211b5a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE