Static task
static1
Behavioral task
behavioral1
Sample
fcc44e7c795e240a9bbbcbaa847d982e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcc44e7c795e240a9bbbcbaa847d982e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fcc44e7c795e240a9bbbcbaa847d982e_JaffaCakes118
-
Size
5KB
-
MD5
fcc44e7c795e240a9bbbcbaa847d982e
-
SHA1
269bd214a8c2af1c69ce0c75f2525cd9c64ee6ec
-
SHA256
b9e3999ea85d16ed8c580d33032937365a377243f9347aed282eca553d4740d0
-
SHA512
6ba9d6c997e9368540c783f722d9d80628a8f49a58696ad3830d93f344563a644a10f134b0d217fcb108c7cd530ca785839181a61ba70ee6e793972670b85814
-
SSDEEP
96:lrK1ancr663eDrc1O0sxOYsWBpPrZEz2gbjTe5O:lrdnFKOlVrRgXSE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcc44e7c795e240a9bbbcbaa847d982e_JaffaCakes118
Files
-
fcc44e7c795e240a9bbbcbaa847d982e_JaffaCakes118.exe windows:4 windows x86 arch:x86
404897e9811b336a73714c4afbc3c108
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNumberFormatA
EnumDateFormatsExA
lstrcpynA
user32
GetKeyboardLayoutNameA
CallMsgFilterW
IMPQueryIMEA
gdi32
CopyEnhMetaFileW
Sections
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.��� Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ