Static task
static1
Behavioral task
behavioral1
Sample
fc517394c86b3b8934a68cc51c2bf39d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fc517394c86b3b8934a68cc51c2bf39d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fc517394c86b3b8934a68cc51c2bf39d_JaffaCakes118
-
Size
126KB
-
MD5
fc517394c86b3b8934a68cc51c2bf39d
-
SHA1
6a25bb5216e2e2e71a665d492a3f3cee7e710013
-
SHA256
d45fbc21b79fb38958ddca90b382504f13dfdb967cd485cdd307793463968a06
-
SHA512
b659c9f9a6e4198484c71fdb74b3c71a5305db1c22f3716e05cb0a3c25962356b31d2860b4854ad348ab664a4b1f29abbcb9cd06e0707fdd97c32d0f4105a248
-
SSDEEP
3072:VQI/8tDLkHMzPG2sIkDLDGpFHTAqGAJyeG1eh5uOVom4u6:uIGGW+RGHreGcwh56
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc517394c86b3b8934a68cc51c2bf39d_JaffaCakes118
Files
-
fc517394c86b3b8934a68cc51c2bf39d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
gp Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fn Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9ykcgd Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE