Static task
static1
Behavioral task
behavioral1
Sample
fc5ad6fbd54a4833c8d418a913011db2_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fc5ad6fbd54a4833c8d418a913011db2_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fc5ad6fbd54a4833c8d418a913011db2_JaffaCakes118
-
Size
777KB
-
MD5
fc5ad6fbd54a4833c8d418a913011db2
-
SHA1
928dcd71008423838e7b82c8e2518c9ecec07cf1
-
SHA256
6c1b44aca840d2ec747fa3d551113ae3f9dccd1dfd6db1f8cfe0723a23041791
-
SHA512
31d8f4811653b24d776785d427e865819f616e1543f52beaa0366d4403a03a5a8f56b6e9a697dd9cbb83c9e210e4a6782e9f9860fbadaf4dc137d38bd6cd1ff4
-
SSDEEP
12288:bj6uunVjHYk7ZvqPiNDAMUGccUMKzVCXj+I6CtuZF3Z4mxxueL9gUopj5AKphCN5:bm9YcvbN8MG5CiI30ZQmXfLOoTJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc5ad6fbd54a4833c8d418a913011db2_JaffaCakes118
Files
-
fc5ad6fbd54a4833c8d418a913011db2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 412KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 343KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE