Static task
static1
Behavioral task
behavioral1
Sample
fd9ae3a371b59ac5f4a6584637fb7184_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd9ae3a371b59ac5f4a6584637fb7184_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fd9ae3a371b59ac5f4a6584637fb7184_JaffaCakes118
-
Size
19KB
-
MD5
fd9ae3a371b59ac5f4a6584637fb7184
-
SHA1
b9549eff0177a2c3bcef2665a38569072a5b421f
-
SHA256
7ebda88d9106a3eab54ee0d1d764d4f5629c48f87a4249ba69cb81dcfedd3ec1
-
SHA512
a0fdc003037e98c46e37627d4975aa0d306c11e62f58050c951d2fc84cbf18ed904b26d086a0b341458e41c8e11fca187064272c13b6d863c6620e1283f6e3e1
-
SSDEEP
384:8cu3frpOraJTqnpdQtHRjd3TwU/GhLVUxILmWmPZLsc1duVgw6LAP:8p3zxJTqpdet5TwU/cLVyvW8FuVgw7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd9ae3a371b59ac5f4a6584637fb7184_JaffaCakes118
Files
-
fd9ae3a371b59ac5f4a6584637fb7184_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 468KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ