Static task
static1
Behavioral task
behavioral1
Sample
fc6cc0a92405c9aaaf00cef0e5c07b8d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc6cc0a92405c9aaaf00cef0e5c07b8d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc6cc0a92405c9aaaf00cef0e5c07b8d_JaffaCakes118
-
Size
99KB
-
MD5
fc6cc0a92405c9aaaf00cef0e5c07b8d
-
SHA1
42f72fae7650ca1598f5a00bea587f6086e9d735
-
SHA256
411ddfba609bd2778e6c88534d2f183e0c1ae96754fc306eef5cf6b8971bc659
-
SHA512
a285caefffa8cf602cd969ace00287aa3dbb7dfb1122d235e79bbe00ccad2a34223f855d5cfb90e692f9c745cbffc12019a36e7e56943cb94cfbdc1278a7376e
-
SSDEEP
1536:NfBIy104JT4ykDfynnWHXh1q8JMJBrY0wQxL6UvIGbRxSFVqPYIbLaElzzksD6n:I+041Opx1zGmLAdbCnZIbLaElPksD6n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc6cc0a92405c9aaaf00cef0e5c07b8d_JaffaCakes118
Files
-
fc6cc0a92405c9aaaf00cef0e5c07b8d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE