Static task
static1
Behavioral task
behavioral1
Sample
fc8e1dedf4d564fdde701a5887f4fd0c_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fc8e1dedf4d564fdde701a5887f4fd0c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fc8e1dedf4d564fdde701a5887f4fd0c_JaffaCakes118
-
Size
127KB
-
MD5
fc8e1dedf4d564fdde701a5887f4fd0c
-
SHA1
ed5dc0637db1b1ab5266bc7d271ffca33398fdc4
-
SHA256
d213910dbb44b3d54aaa34a98ba4bd7aad33f393df1fbd809807daa7766ccd20
-
SHA512
a68df2af4a5dc2dac97c8b46cf3bd6975c667ccc437910000037e39ee2dee755ba5ce9371b958ae7bbb6ab7422eb281354a0b8f944ec65450f87d605a7762676
-
SSDEEP
3072:DPiU4GU7WNvmxUF40QUHSKm0K0Pf2EXw0MdI1uef9:DKTGUqOe4vKtPeEXw0A/e1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc8e1dedf4d564fdde701a5887f4fd0c_JaffaCakes118
Files
-
fc8e1dedf4d564fdde701a5887f4fd0c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
7kvbc2zm Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bphm Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ogem2 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE