Static task
static1
Behavioral task
behavioral1
Sample
fd4bb499459141929f0e04ab9b0b7efd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd4bb499459141929f0e04ab9b0b7efd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd4bb499459141929f0e04ab9b0b7efd_JaffaCakes118
-
Size
1.7MB
-
MD5
fd4bb499459141929f0e04ab9b0b7efd
-
SHA1
7f8bd5a92e7c2ba560f19cfd2950f0ab7eb27a92
-
SHA256
1a0a7040f9074f728786fa326361597f3455a19485fca43fe14feee0996155e2
-
SHA512
53f73911e6b169bf4db5abb3dc0d77015e7a7018bb6562ce2ad77553748eb3ca627f84ce7ea9d13e55141731afd30aeb730d1d527a06f74534bcb185db6ef621
-
SSDEEP
24576:7PxB5pl5hHFvm8VMc7wz3hbysTT8A/9b5c4CquKzLmAyozHhpoVd5TxgJdOQ2Y2G:7PxBm+wrzy8bO1GrQLX+ISJeauI3V3h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd4bb499459141929f0e04ab9b0b7efd_JaffaCakes118
Files
-
fd4bb499459141929f0e04ab9b0b7efd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 62KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jos Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE