Static task
static1
Behavioral task
behavioral1
Sample
fd7e1dfe90ad0d6dbfb9e1bb3afe6539_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd7e1dfe90ad0d6dbfb9e1bb3afe6539_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd7e1dfe90ad0d6dbfb9e1bb3afe6539_JaffaCakes118
-
Size
22KB
-
MD5
fd7e1dfe90ad0d6dbfb9e1bb3afe6539
-
SHA1
dd11d87fb91352a2e8370ce2c51f614c0c92368b
-
SHA256
c2d5f64ee15362946de64589d029a297850f5fa775084a0a94d9bf6fc1ea3926
-
SHA512
470a74eb926ae237be786168bf61b68d676d16a5a90bec5a303db7482129bd0e0d0ef85a8046663909ec1a1cfa43d1dc1c85a213530b9ebfee188805464c6343
-
SSDEEP
384:LK0q2vDqixjUBD2a/baYFqqH9sj+qSk0FAO9RcGq72z+DffXgP2:Zq22DiEbsj+qSkXO9lqCHP2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd7e1dfe90ad0d6dbfb9e1bb3afe6539_JaffaCakes118
Files
-
fd7e1dfe90ad0d6dbfb9e1bb3afe6539_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE