Static task
static1
Behavioral task
behavioral1
Sample
fd764512c22c22a06bcecb10468b5375_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fd764512c22c22a06bcecb10468b5375_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd764512c22c22a06bcecb10468b5375_JaffaCakes118
-
Size
268KB
-
MD5
fd764512c22c22a06bcecb10468b5375
-
SHA1
9e1697ab6bf41870204f1afa2b35376a085e4fa5
-
SHA256
765ceb66ed5f1cb9cf51d15eb3b85f4ee6182ffc1dff56179c8b1baf80a1427b
-
SHA512
3fd84ad3d66a31eab1994b80b3c382910a46ee1b0e0b5bbba847e46e7f41a47121e5494d22dc69f59050479aab4344c771d34523367744404a105357d6fb15ad
-
SSDEEP
6144:dAQ9XIl0Yg123WUbe2lzppgO0XgVM9Kba/Auu+jAQQaP:dH9YQ2bbeM0rgVMAb+j3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd764512c22c22a06bcecb10468b5375_JaffaCakes118
Files
-
fd764512c22c22a06bcecb10468b5375_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.tRUE 0 Size: - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tRUE 1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tRUE 2 Size: 267KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE