Static task
static1
Behavioral task
behavioral1
Sample
fcd39ba82d15a7c0d06087ab72c5f141_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcd39ba82d15a7c0d06087ab72c5f141_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fcd39ba82d15a7c0d06087ab72c5f141_JaffaCakes118
-
Size
56KB
-
MD5
fcd39ba82d15a7c0d06087ab72c5f141
-
SHA1
12db0d50f8d209acea9edc033c46ac90832d904f
-
SHA256
7fc17c033c2b178c5e670b33aab7a4ae628f848f43c439e1557b14f41c3d6687
-
SHA512
bea4faf91d2079c4fb0e8714059fe07ff150002304a3a9f533a4a0c03d7daf21d74dbcbbf003a9eec7e367ab9082ca2e7b709882f3e91ca04f14bb30f43a5a57
-
SSDEEP
768:tVVGV1CedCu+2XC4AD6Imb0tezj/TZvWj2iF2:FE1BCu+ay6ImbCezj/TZvWj2ig
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcd39ba82d15a7c0d06087ab72c5f141_JaffaCakes118
Files
-
fcd39ba82d15a7c0d06087ab72c5f141_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1013B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PATCH Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE