Static task
static1
Behavioral task
behavioral1
Sample
fdfdd639f95796a01a5494b0d6ac38de_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fdfdd639f95796a01a5494b0d6ac38de_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fdfdd639f95796a01a5494b0d6ac38de_JaffaCakes118
-
Size
41KB
-
MD5
fdfdd639f95796a01a5494b0d6ac38de
-
SHA1
a07358a8cd26150d15e2d655e2079c0993f07a7c
-
SHA256
12e87596c33d394abe2e278070ad8f944f4f1c7a5c50f82ec1fd879045ecadc3
-
SHA512
fb636c19034b615df64940a13a1b227e162ab832a4b848be11b7d0c96d43c1a9eca3e8771c71543d46f4e7af651729dec4ab6e0bf58dca08899f1226fa7a8cfb
-
SSDEEP
768:YVMfv3qgbQjrJlL7O+cM1OCDYWLBPVX0KYEwwC841VUDoSpeK4U:5a+O7LkKVjXSy4VUDoSp5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdfdd639f95796a01a5494b0d6ac38de_JaffaCakes118
Files
-
fdfdd639f95796a01a5494b0d6ac38de_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 38KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xOrOXhcx Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE