Static task
static1
Behavioral task
behavioral1
Sample
fc4794a58754a31800c3ed94f21bcbf4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc4794a58754a31800c3ed94f21bcbf4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc4794a58754a31800c3ed94f21bcbf4_JaffaCakes118
-
Size
46KB
-
MD5
fc4794a58754a31800c3ed94f21bcbf4
-
SHA1
bb5a2bebbe215bb2333060feefa36d2fdd0d127d
-
SHA256
6fd937b5032b334166bf737b899ee37256f0fae9c3b4343a0ef41f68e2fb0c89
-
SHA512
ea3dc4bb9b833bb3b2bfa1b874539f8fd22747380db5edfea59e79e44dbb44ce9873d7e0b206dd64d8755aed33066202ea8fd2326d233754d4d515468908d13c
-
SSDEEP
768:OH3oqwl6s36qvfyMANYvESgZM2yOV/Ujgr7/bSyyT3ZuLZ43a0yihu6BvHWgyvlW:U+lN3ryMM1ZBVvmyy7qy37BHv2fv1xXw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc4794a58754a31800c3ed94f21bcbf4_JaffaCakes118
Files
-
fc4794a58754a31800c3ed94f21bcbf4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�H�0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�H�1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�H�2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE