Static task
static1
Behavioral task
behavioral1
Sample
fcf08e88e6fc22aed1debb8a4bbd8f2f_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fcf08e88e6fc22aed1debb8a4bbd8f2f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fcf08e88e6fc22aed1debb8a4bbd8f2f_JaffaCakes118
-
Size
62KB
-
MD5
fcf08e88e6fc22aed1debb8a4bbd8f2f
-
SHA1
0ce0d6ee07d02d9b1d0ca8b4e9aae424797002ec
-
SHA256
f4982ffab33abb531ddc1455871f42156f8d43fbcd3e49bfc860578f709da385
-
SHA512
da46c6412e17ebafd5dff71adcc01c2dae0ca6f5ed5bfc9a3e1be0c7106b67dea85cd53f55c35b4426a10d82a9acfe06264b1c268f9ffe921fff305f68d7d9e6
-
SSDEEP
1536:K2IaTp3vU78tj9/cCntQDZxt+k60i05K+kApMrCkX3ZsG:TIaThvUIj9/cCn680i+K+5pMrCkZsG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcf08e88e6fc22aed1debb8a4bbd8f2f_JaffaCakes118
Files
-
fcf08e88e6fc22aed1debb8a4bbd8f2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rcep Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE