Static task
static1
Behavioral task
behavioral1
Sample
fd62800c7105f5fcfa3a1865e68db47f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd62800c7105f5fcfa3a1865e68db47f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd62800c7105f5fcfa3a1865e68db47f_JaffaCakes118
-
Size
303KB
-
MD5
fd62800c7105f5fcfa3a1865e68db47f
-
SHA1
9e52a55f0215e2f398ff0d5a1862b680d81fa9f2
-
SHA256
f8f377bf8bbd460de64d1e193f45d198511ed96c9908efcd460ad6427a58ec32
-
SHA512
7a42c99a8b13ede9814cb1e02e06d0458d90822955b13ca6e5e760c35c2fb1a2c2d4e9a5314c6b904742dae26a3f15a93a65ed4b0350f5126086c8a03c8ca142
-
SSDEEP
6144:4JToqeTJjYEkEI6liaotw9+3xzj7noYZOxx10x+L6/oloLy473SD:45oH/a6kgyaVL101/2Wys3K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd62800c7105f5fcfa3a1865e68db47f_JaffaCakes118
Files
-
fd62800c7105f5fcfa3a1865e68db47f_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 592KB - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 324KB - Virtual size: 323KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 202KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ