Static task
static1
Behavioral task
behavioral1
Sample
fc57aa29fb37b2a38bfffbdb1d349266_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc57aa29fb37b2a38bfffbdb1d349266_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc57aa29fb37b2a38bfffbdb1d349266_JaffaCakes118
-
Size
432KB
-
MD5
fc57aa29fb37b2a38bfffbdb1d349266
-
SHA1
e6439c2cd5276a2e170fbf7e1d3a2bdc87e35b6b
-
SHA256
15b295bf479812c15a65a91d59c1e1cdbbe8f65c6e7909f48a50fc04429dc10b
-
SHA512
4b02a209da085dd16a91a91c8590c84dfc01f7ad85b05fab1f4853631f1343d0ec4397efd755f76f73006453aec609a6ba4a9a9cc1922fdfd8183b856af0e313
-
SSDEEP
6144:8Hs2DxjkDfilBwWlF5U7Jgbv9WqZm+oySVApm1fVN8VgXWBqjCfHPOeOgsAS6Hsh:8HBaKuW31WqYTySXVbCqN9n6HXlK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc57aa29fb37b2a38bfffbdb1d349266_JaffaCakes118
Files
-
fc57aa29fb37b2a38bfffbdb1d349266_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.utop Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.twd Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pghmj Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ