Static task
static1
Behavioral task
behavioral1
Sample
fc603b9d48c96c0ddbec40689f978119_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc603b9d48c96c0ddbec40689f978119_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc603b9d48c96c0ddbec40689f978119_JaffaCakes118
-
Size
39KB
-
MD5
fc603b9d48c96c0ddbec40689f978119
-
SHA1
fec753dea6e7a0b7e316494a216abf8c44614c7c
-
SHA256
b26e369005c1808ea3cbc5b165f9317f033f881ac6509006cf10f361273ca10e
-
SHA512
62b9b39920b976603f174021c97cff7d23204b79cd355c401871bd5ccb98272bf03ecaaa8fe508b18fc5bdf7a39445b76bcfacf6a8a6f5fae5499292cad71433
-
SSDEEP
768:ymOPNZwxGuQWUsWLQTBBG4bJM4A0/HvcJ9wEs5ZxRwYj68:jOPsxGuuQTuGA+0J9C5N1jZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc603b9d48c96c0ddbec40689f978119_JaffaCakes118
Files
-
fc603b9d48c96c0ddbec40689f978119_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ