Static task
static1
Behavioral task
behavioral1
Sample
fc0643cc63fc4fb129469ef59027d9f9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc0643cc63fc4fb129469ef59027d9f9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc0643cc63fc4fb129469ef59027d9f9_JaffaCakes118
-
Size
690KB
-
MD5
fc0643cc63fc4fb129469ef59027d9f9
-
SHA1
03af14f174f8449dbd01d5b3ffde4309348e2a9a
-
SHA256
6a51fecd4aeb104e103d8afd3ae7e82351e8047d8d4eff77ec08bb1f5310339c
-
SHA512
ce4dae469dc20557c715c429c0810605903296cfe52b58e3838bff42bb71b6a3935b4fc309d77a00577cf734e41b1fca34d4ff1e5f58fb8141f64902415ad925
-
SSDEEP
12288:d4s93vrvQ4m4CGA9ejIletYJbmXAqF3Z4mxxawttfoOlMDwa4SMGl:dlFvroF6AcICYJiXAqQmX/tRll7wl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc0643cc63fc4fb129469ef59027d9f9_JaffaCakes118
Files
-
fc0643cc63fc4fb129469ef59027d9f9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 374KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE