Static task
static1
Behavioral task
behavioral1
Sample
fcbe4b26d23f7435b9a9b65a80d19a3c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fcbe4b26d23f7435b9a9b65a80d19a3c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fcbe4b26d23f7435b9a9b65a80d19a3c_JaffaCakes118
-
Size
563KB
-
MD5
fcbe4b26d23f7435b9a9b65a80d19a3c
-
SHA1
134763bdffdd670d5c31e1cbf21ebd5d59d1a7c6
-
SHA256
4e22c51fb0750f123d7708166f5ff83a9ed9d3e85156a22d7faa0b06f075f5ab
-
SHA512
3dbf5de653e89ba4d283141d70927f335221b3c9694131d082a35ef9cb2ad599b317ad76d4b8da140a21321c65f25bb9214bda41e08d6db30ede85bab6990870
-
SSDEEP
6144:wpFNPAbtUhNpSw2SkJ79GXSqTNVXpHNBVUAw4ku2DXwtfwLAw:o32JJQXSqTN9ptBVcJPcw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcbe4b26d23f7435b9a9b65a80d19a3c_JaffaCakes118
Files
-
fcbe4b26d23f7435b9a9b65a80d19a3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 276KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 197KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ