Static task
static1
Behavioral task
behavioral1
Sample
fc9d84e08e3ee6d07b36c8affc51abb4_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fc9d84e08e3ee6d07b36c8affc51abb4_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fc9d84e08e3ee6d07b36c8affc51abb4_JaffaCakes118
-
Size
256KB
-
MD5
fc9d84e08e3ee6d07b36c8affc51abb4
-
SHA1
81d6e62cbdeef3035fb7d35306b8fa713f45aa1a
-
SHA256
7c1ce6afbd5edac441f2ec49d2e259d03e1064f9d44b0a79771e953ca2a4badf
-
SHA512
e9d4204a7b32b286a8a925231716ce92a67b56ad3640be546ff7a3273dbb155bfe7c60ac8bad49b751f2dc777c9f7c54a20a9ee34727acc6ed610b6fd52d73c6
-
SSDEEP
6144:Ont557K+vHjTtTef4lydaTuBVYSZ2FmhdQU25c6f:Ont5lK+Pdef4lyogVYcNEh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc9d84e08e3ee6d07b36c8affc51abb4_JaffaCakes118
Files
-
fc9d84e08e3ee6d07b36c8affc51abb4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 520KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 303B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE