Static task
static1
Behavioral task
behavioral1
Sample
fc1577a00dde64431782c55cdb4947be_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fc1577a00dde64431782c55cdb4947be_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc1577a00dde64431782c55cdb4947be_JaffaCakes118
-
Size
188KB
-
MD5
fc1577a00dde64431782c55cdb4947be
-
SHA1
fdd8ba9ba013bec0e9bddc59f770f60b79dbe21e
-
SHA256
9db7830cb083b568baf5e45d6bc0a32bb4d5b19795afc4c3703b916f33122c02
-
SHA512
b1d158d03782fecb71e17a33da97192973dd54fdab9780282cd63c826a99e6b062cc48c9bdadf3c2c8969b146f81d2f5ba9e8ee5722e4a71e861f2183f9453c3
-
SSDEEP
3072:OIxVgD6dDS/XDr6zBrUfg/CfEgljiKjEmi3E0hLPu7f0aycf9F:HxVgeMXPoBQfFMbKjx/Ucfr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc1577a00dde64431782c55cdb4947be_JaffaCakes118
Files
-
fc1577a00dde64431782c55cdb4947be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ssMjnxpf Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CHWevvZ8 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IuAXKSIm Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TT0J1k2k Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rhd2yVmX Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
CHWevvZ8
-
IuAXKSIm
-
TT0J1k2k
-
rhd2yVmX