Static task
static1
Behavioral task
behavioral1
Sample
fc40323df0b0aaef197e22fb24f1d777_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fc40323df0b0aaef197e22fb24f1d777_JaffaCakes118
-
Size
104KB
-
MD5
fc40323df0b0aaef197e22fb24f1d777
-
SHA1
2d1ac61b2d134f9007a68e60dcbc761d3d5af605
-
SHA256
58087c234509e4c8eaea493d65e1f6b86ae297ed30d09e008612cbcecec0c0e3
-
SHA512
bce1095ad83a6eeba2054066a8eec24671159320ea4c05ba0df3c72e5062ce534fcfe2ff59d908d7bb2bb5e34d0b23ffee4da8d837b91f512d80dcca86c02fa9
-
SSDEEP
3072:Hn1i8nCaOK6wYXrSODoFlfombHrP7HpV3CCF0rWI8HN0OT:fLO2YXrXDUlQmbLzL1n7T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc40323df0b0aaef197e22fb24f1d777_JaffaCakes118
Files
-
fc40323df0b0aaef197e22fb24f1d777_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nvi5srt Size: - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hs Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2cae Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE