Static task
static1
Behavioral task
behavioral1
Sample
fd146c705273088b50e4f5c3d431a907_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fd146c705273088b50e4f5c3d431a907_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd146c705273088b50e4f5c3d431a907_JaffaCakes118
-
Size
506KB
-
MD5
fd146c705273088b50e4f5c3d431a907
-
SHA1
75942c96ba8c0ff808b0cf5ffe9c7ca0b8f65f36
-
SHA256
857212707c389c14b7287604ecca670bb625a4fd0b8a7efd4931e9b1cae0a339
-
SHA512
716a6838b67652124e2459cd5d67f2b481ef399b77ebc0e2be51985b30b6781033659f0e771eb664197f711a0bc9e5144db88b09bc9d8f9644a5feb095cb6e46
-
SSDEEP
12288:CwVOXqDMDImCRF7WSm7kNWcGQ0D51pvynvELcXOt+lu2m:C0eqADSF5mINWcGBJQR4n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd146c705273088b50e4f5c3d431a907_JaffaCakes118
Files
-
fd146c705273088b50e4f5c3d431a907_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ