Static task
static1
Behavioral task
behavioral1
Sample
fcda04a43866718cbcbfb39a9440c9c1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fcda04a43866718cbcbfb39a9440c9c1_JaffaCakes118
-
Size
2.6MB
-
MD5
fcda04a43866718cbcbfb39a9440c9c1
-
SHA1
6d771d8c6c183ad3f26f79671f273a7659ec7e67
-
SHA256
120c6f86656692a1045427d52af92b09ad0d9ce37e692c5fd8380c3e554c9fa2
-
SHA512
f2341bbd05a69cf81ee60584f38d75a1f18327ab33e9bc74187a9b47c4e66d3bfd826dc8a1bb24ff212941dd1b7fa11b0a09f59dd2c77a2d476646b82c6e103f
-
SSDEEP
49152:1ZeQRjQUuiiJVpM3c7x37u9zhb6EeJjB3KxLfJYQ99rolse6/xg/pzW:7h+P7ahb6WxtYQ99kl1wg/M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcda04a43866718cbcbfb39a9440c9c1_JaffaCakes118
Files
-
fcda04a43866718cbcbfb39a9440c9c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
96a5988e559d34ed85930fa142f118a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetLocaleInfoA
Sections
Size: 317KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xghjfwca Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hadworbb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE