Static task
static1
Behavioral task
behavioral1
Sample
fd3848d3d06c3436ea76cef2d828cdaf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd3848d3d06c3436ea76cef2d828cdaf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd3848d3d06c3436ea76cef2d828cdaf_JaffaCakes118
-
Size
97KB
-
MD5
fd3848d3d06c3436ea76cef2d828cdaf
-
SHA1
caa5891ec3ad26d4532cecc0d591ca7e592e8c01
-
SHA256
bda9e493365b8b15ca529c4e817fbbc0a7b18bc68af021ca799b3985ceebf13c
-
SHA512
ce62ec9d94932e732c0b49748fae4e8f7e83654ecd3264c672d4765684859615854efaa7c1d7ca3ad4939fd025aece0fe6e4b1a0c4113c2f708fbdf153bd4ec3
-
SSDEEP
1536:5vLTMoORizUPliPsm/gL16ZpQGh6MgHN+PhuLGR/11TvYMoOJ:RLTxOMUMPsgQvTMY+PhGGR/11TYxOJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd3848d3d06c3436ea76cef2d828cdaf_JaffaCakes118
Files
-
fd3848d3d06c3436ea76cef2d828cdaf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
gJegJe Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
gJegJe Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
gJegJe Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ