Static task
static1
Behavioral task
behavioral1
Sample
fd082200aecc641464c8be68dd16b41d_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fd082200aecc641464c8be68dd16b41d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd082200aecc641464c8be68dd16b41d_JaffaCakes118
-
Size
47KB
-
MD5
fd082200aecc641464c8be68dd16b41d
-
SHA1
ff66a29fc05f4481bc02cb4b97e6cb4551562a03
-
SHA256
67250c17f351a97107dbe9d230326818626c711274935740289f8129d00f13e1
-
SHA512
86f815a534da877aba2abf0abe52c04b6dd0c430645e3b33ce030a417aa5e216e77a67304c07258245d6857921de4eaacb5c77ceaa64c5a4bddf37394e7ac04c
-
SSDEEP
768:r2FsQWb8LuUX03g4iS+TTNXM2iuK6CxtAc/bNm0+dMaFCb+e6gJD1W9E7TNI:vQEwlfTxM2qvSWbkd/CqejJD1W2+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd082200aecc641464c8be68dd16b41d_JaffaCakes118
Files
-
fd082200aecc641464c8be68dd16b41d_JaffaCakes118.exe windows:4 windows x86 arch:x86
42e5a8c962864be433ae734b125e65f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
FindAtomA
GetCPInfo
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 715B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ