Static task
static1
Behavioral task
behavioral1
Sample
fccbec0ceff6a4fd813ba43fc15ca607_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fccbec0ceff6a4fd813ba43fc15ca607_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fccbec0ceff6a4fd813ba43fc15ca607_JaffaCakes118
-
Size
71KB
-
MD5
fccbec0ceff6a4fd813ba43fc15ca607
-
SHA1
9b77dc036e1a22e1675587657847c49258d81476
-
SHA256
749eebb144debe85135259eff6c25726ffae6fa65d7e09100f10ec8a4378c957
-
SHA512
7ffb4c1db52ea4f00fee0f99585d300cb69991167324f062a843353c8ced042dfc75ef40ee4fa053908fa6f678d4572613ce18dd643b29bf2a33d46f1e23f7ed
-
SSDEEP
1536:9OY499DAGjYT3vO6tMn+3WhR2uDO/7c/riHOXm/l393:954Dnm3baYWhRl8oDm9t3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fccbec0ceff6a4fd813ba43fc15ca607_JaffaCakes118
Files
-
fccbec0ceff6a4fd813ba43fc15ca607_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.misswe Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.misswe Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.misswe Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE