Static task
static1
Behavioral task
behavioral1
Sample
fd8b4bbcd9537c79c4bd668ef7b9f40b_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fd8b4bbcd9537c79c4bd668ef7b9f40b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd8b4bbcd9537c79c4bd668ef7b9f40b_JaffaCakes118
-
Size
30KB
-
MD5
fd8b4bbcd9537c79c4bd668ef7b9f40b
-
SHA1
8f38006b48e363fdae5ca1b21328b2e058d09c9e
-
SHA256
de64f6485eeb158174c41b347223ace48074479c9a43d07c9d9937b4cf255ef3
-
SHA512
99c9c331377a6b78b38bab0e44dfeb7eb91e9b1e332caeaf9d5def2a3336a88197203214ea81dfb9b6801106073f464092b346b18eb040293764ffb844b81727
-
SSDEEP
384:cR34wVhoR97la+AKBWuK2Tr9TaIUKF+awdxBFjeBul2C:c94wDm9lavYK2AI8fdxnjeBFC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd8b4bbcd9537c79c4bd668ef7b9f40b_JaffaCakes118
Files
-
fd8b4bbcd9537c79c4bd668ef7b9f40b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ