Static task
static1
Behavioral task
behavioral1
Sample
fd083d5fd19ac65b9997119ba489b68c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd083d5fd19ac65b9997119ba489b68c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd083d5fd19ac65b9997119ba489b68c_JaffaCakes118
-
Size
114KB
-
MD5
fd083d5fd19ac65b9997119ba489b68c
-
SHA1
bdabad922c9470fd0cc635b17af9748e5c6637e2
-
SHA256
9bf4db5e1590b0d35da2a928550b577c7bc0d6e9b095fd729ad7571ce956b46e
-
SHA512
a8c11b85e228afa5fd2b806f6e7b59b51fa75802fc6ce23f150ee17f0bfba54ce6035bfe916a552a06d7810d5142d99bb0e0f0c5bd8f34006be815411436fbc2
-
SSDEEP
3072:+Nz1EsX4C1ZZV5EeBXQKQm2L0aBr0v1xNkgAoJFxVl8luRxcKPh61f:+1HX5vEUQXL0ax0vtAoJbb8lGxcmhy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd083d5fd19ac65b9997119ba489b68c_JaffaCakes118
Files
-
fd083d5fd19ac65b9997119ba489b68c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
rq5zzoer Size: - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xrhi Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
p2yb Size: 643B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE