Static task
static1
Behavioral task
behavioral1
Sample
fd3643d055054ad1c7b83ebcbd854df8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd3643d055054ad1c7b83ebcbd854df8_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd3643d055054ad1c7b83ebcbd854df8_JaffaCakes118
-
Size
387KB
-
MD5
fd3643d055054ad1c7b83ebcbd854df8
-
SHA1
0c72d167067d61779eccbf36128aafde51ffbb6b
-
SHA256
991362349e70dacb8a894e1b78277906c17a9fdbb7ab86220a3e5119c2b50418
-
SHA512
a23e088a6876892c296e77a691912a37591106bf736dd33e16bf9e9d580b8e8a14ba8d058f717dc288e7e6c82a3ef2553123059ea0a3240fe62eb61e49f18166
-
SSDEEP
6144:0zCFNh9nF2idZecnl20lHRxp3gUlk9ihl0/srEQpPK+e1FtEuxF+U2/kL:0yfF3Z4mxxzoEtlK+kt9T2ML
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd3643d055054ad1c7b83ebcbd854df8_JaffaCakes118
Files
-
fd3643d055054ad1c7b83ebcbd854df8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 71KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE