Static task
static1
Behavioral task
behavioral1
Sample
fc648b01c86eed466fbbf4185241cc72_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
fc648b01c86eed466fbbf4185241cc72_JaffaCakes118
-
Size
80KB
-
MD5
fc648b01c86eed466fbbf4185241cc72
-
SHA1
dd4472c9eb269f9404f3ac0ec720f89aa169e589
-
SHA256
861bfd2d23b1ac75eb01ceb0f3c7261c5c5d4c92f59347681c9dbe60e0baabc7
-
SHA512
8a9b7fcbf70d438873f6e52d5d750588eacb875b2a2fb4f9eda8646876101e989a85acc0f2ef6388776fb50b26513406784c87b0a30085d37873c0656f6405a6
-
SSDEEP
1536:WOz8JUNFdiFAWvYxtAsw/s2Ax/7bXoZk/mCUhrw:WOgsPiFHg2/LAxzb+JJw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc648b01c86eed466fbbf4185241cc72_JaffaCakes118
Files
-
fc648b01c86eed466fbbf4185241cc72_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ