Static task
static1
Behavioral task
behavioral1
Sample
fd54839002f846887c52f2e64fb7e2df_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd54839002f846887c52f2e64fb7e2df_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd54839002f846887c52f2e64fb7e2df_JaffaCakes118
-
Size
139KB
-
MD5
fd54839002f846887c52f2e64fb7e2df
-
SHA1
d5cc730f09da83654a9664ba195b6d7639aaca61
-
SHA256
a4d551b2badda0c3d968500bc8d5638eb6467dfdbd28fda9e80da9ea54d4893a
-
SHA512
64ce58cdc6cd8220937b4fab1879f27fe8d96a8586b2da274064504fa6daa89df5c63aed9397c0a8baf8e43044d6ba248762df527ef6bf8aec2eaaf019b3c3d5
-
SSDEEP
3072:WDnM1ypIXz4McAQFWd8X311LCDbYfA8a2Os/+Q/omU:InVIXMMzSXFVCDbYfoXsWQwmU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd54839002f846887c52f2e64fb7e2df_JaffaCakes118
Files
-
fd54839002f846887c52f2e64fb7e2df_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ