Static task
static1
Behavioral task
behavioral1
Sample
fd4deb34dfb5013ebfb5c6fdf018c55d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd4deb34dfb5013ebfb5c6fdf018c55d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd4deb34dfb5013ebfb5c6fdf018c55d_JaffaCakes118
-
Size
331KB
-
MD5
fd4deb34dfb5013ebfb5c6fdf018c55d
-
SHA1
46de9ca2229bb8777dfc471e3f241ae8c2e4cb14
-
SHA256
e3ff490935df7f719ee1b41dd945505affad2dcb47d9e43d48e5cd8e733fb147
-
SHA512
d2505862de1df7a02d43777f93ea0aef1d0919c511252654fccd620505d06386717b050a34cb8cad1751947144e1bb2f3cd8b979c9e82ff919f89b02a7a49768
-
SSDEEP
768:nlO2+D+tbl4bUV9EZLTfUodhRsEwsNFXqbCFiyeoHwnzPNfVHOknybtYftMh53FG:nlOtD+dK2EZLTfPwsNFifnyFYPm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd4deb34dfb5013ebfb5c6fdf018c55d_JaffaCakes118
Files
-
fd4deb34dfb5013ebfb5c6fdf018c55d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�`�1�C�j Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
L������ Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE