Static task
static1
Behavioral task
behavioral1
Sample
fc415d3f75cae582461d99ac7cf0fc6b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc415d3f75cae582461d99ac7cf0fc6b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc415d3f75cae582461d99ac7cf0fc6b_JaffaCakes118
-
Size
178KB
-
MD5
fc415d3f75cae582461d99ac7cf0fc6b
-
SHA1
fff4f85ba867efd9e41094158a08be33c2b8cd13
-
SHA256
2640c9eea59b87fb5fb03014730d4d5f4b8794a1e89e3e449718f204d74e6bdf
-
SHA512
a247e8c07e751cf60ff6534ffe27c87dd4480a1857ec4563ff0f1dce8de63fafa156101f6bd7a033ee3e20b2b250053d82bd1a69535cd8b363d3394e2a0972be
-
SSDEEP
3072:jrkSCemEmjjuq6gCyDwSVSMFQ94rSZw4NI4C3zxx+pQpMD5nW3oKoPgPmarQ6nSf:HonjjH3CyDw3MFQeuZBWH+3s3Yh09nSd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc415d3f75cae582461d99ac7cf0fc6b_JaffaCakes118
Files
-
fc415d3f75cae582461d99ac7cf0fc6b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 1KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 174KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE