Static task
static1
Behavioral task
behavioral1
Sample
fd3d7cad624c8035b11ef8a2fbd29573_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd3d7cad624c8035b11ef8a2fbd29573_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd3d7cad624c8035b11ef8a2fbd29573_JaffaCakes118
-
Size
24KB
-
MD5
fd3d7cad624c8035b11ef8a2fbd29573
-
SHA1
f7a3d9ca8406283f6fbac02d3a36b4bfeea31b98
-
SHA256
e65d34cb2abc2efcc7290eaa8ac60b7c27527ef86e2051361c4204ae7cb4ceb4
-
SHA512
1dc61917b3776e18829dd036c51a09c6ae57ff51aa27143d51ba43bdcb0a1a02fd129d48d8d6a04585eec527921e7e857bf385fd3ee8e4562db43c20f8620d85
-
SSDEEP
768:AADQ0iBv2aRlgM63wveHuUW1btUGNrBM+A:7xiBCM6Me+hUnF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd3d7cad624c8035b11ef8a2fbd29573_JaffaCakes118
Files
-
fd3d7cad624c8035b11ef8a2fbd29573_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 957B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 450B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ