Static task
static1
Behavioral task
behavioral1
Sample
fd412d42f8d0629c1a1d224c60cf0ce0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd412d42f8d0629c1a1d224c60cf0ce0_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fd412d42f8d0629c1a1d224c60cf0ce0_JaffaCakes118
-
Size
127KB
-
MD5
fd412d42f8d0629c1a1d224c60cf0ce0
-
SHA1
d29964b302243ca2ea506488e394d33be9493841
-
SHA256
fafe125da2579fb96e15e43b395987638adef3dcab67ffcf81706e294de1a4f1
-
SHA512
2c1ed97965df50cb0b96f7a4db24e2ed27f9d4f6c1ed709178a6a147a6a83705f14ec2ab861b1743b79fde32215b8826d3d7034b46634c5646b98a91daed859d
-
SSDEEP
3072:W5L9PufIX2yZDrp+VeV7WI2lqd5lpHMEy23bw:WuAXvZDEMoNqTlpHBPw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd412d42f8d0629c1a1d224c60cf0ce0_JaffaCakes118
Files
-
fd412d42f8d0629c1a1d224c60cf0ce0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ