Static task
static1
Behavioral task
behavioral1
Sample
fd4856e8e62cec3730bbee5ba06381e7_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fd4856e8e62cec3730bbee5ba06381e7_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd4856e8e62cec3730bbee5ba06381e7_JaffaCakes118
-
Size
1.5MB
-
MD5
fd4856e8e62cec3730bbee5ba06381e7
-
SHA1
4f130a68332127a2f77d3f9998981ee2c8314cb5
-
SHA256
27bf33dd466c10a0e0ea59f3af1884259102f60253f25be00ce2e2807edba08b
-
SHA512
a287ba51c8ab6c6b3779e8423fc30a900b2d3e2424a030476cfa8e36ebeca61de9ad23f90b63662aa4bfb625796ec291caff4f61efd6ee9d6e4671c50d1ce979
-
SSDEEP
24576:PEqyQOTiioZDx+GnZQIGu7qNkejFw0o3P80G9oNjaCzjW8XMx7uJ2Fpr0Pww33eB:PRfOTr8LnE9kGFDo00GcjvjiaeijDix
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd4856e8e62cec3730bbee5ba06381e7_JaffaCakes118
Files
-
fd4856e8e62cec3730bbee5ba06381e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DANOS Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE