Static task
static1
Behavioral task
behavioral1
Sample
fc946f3d531c5bfcfb16f96786dbb6e6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fc946f3d531c5bfcfb16f96786dbb6e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc946f3d531c5bfcfb16f96786dbb6e6_JaffaCakes118
-
Size
214KB
-
MD5
fc946f3d531c5bfcfb16f96786dbb6e6
-
SHA1
15871b0f2dbe0be4bdd43b5a38e594947505daf7
-
SHA256
9d3f0f93f0997eccbed82d2c42d232bb4bc0e008ffa46cd89d1b0f9cf9de7435
-
SHA512
d78a772c1d42795bb37bf0ecb792e6e0a17f78dc112aaeac6a38607f11c2b4b8a564822b4128a8d5e2cbe825e5b8a14ae63d08f5323681ef11abf7bcbe4b8efb
-
SSDEEP
6144:GjqyOLJu+ehsZCANCxHywWp7OHGa5tZ2HC:LfJu+a5xAKHGa5T2HC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc946f3d531c5bfcfb16f96786dbb6e6_JaffaCakes118
Files
-
fc946f3d531c5bfcfb16f96786dbb6e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: 512B - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 213KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE