Static task
static1
Behavioral task
behavioral1
Sample
fc86aed0edace679e34b52b419ae6d06_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fc86aed0edace679e34b52b419ae6d06_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fc86aed0edace679e34b52b419ae6d06_JaffaCakes118
-
Size
17KB
-
MD5
fc86aed0edace679e34b52b419ae6d06
-
SHA1
33423eaa05d0fb39360967bc2640482102389c75
-
SHA256
39cb1b987911078eab8838990f016b8afce5d6824d29e080a6419e05572b7d3a
-
SHA512
1b660755dc239c0e502e0853d4839111ce7571c3396070457e38493cfe80209fbe22bcc592d22ad44f53bfbb7d42def7bce37a89cdc4e974ea844f1989cd9698
-
SSDEEP
384:0edQZBSx4hO2fCRHDXEutzk0cSnCpacoqj771KZx5jI0/JGO+AxTr6+I9PfYUDrV:Pd6xnC9DUSzkPSCVzrx0/JGOJxqLoI4y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc86aed0edace679e34b52b419ae6d06_JaffaCakes118
Files
-
fc86aed0edace679e34b52b419ae6d06_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Integra Size: 128B - Virtual size: 128B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE