Static task
static1
Behavioral task
behavioral1
Sample
fcfa50f893df8b0001fa478c9c38aac7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcfa50f893df8b0001fa478c9c38aac7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fcfa50f893df8b0001fa478c9c38aac7_JaffaCakes118
-
Size
14KB
-
MD5
fcfa50f893df8b0001fa478c9c38aac7
-
SHA1
a9ae23fe1b0696b7c7571467d233a0e6773adacb
-
SHA256
637c3996da256cf3f2548961ef8c7196fc205e7f565e926e8925f68de901523d
-
SHA512
d21c23ade10da72ae176939a9f906d5ace61a567fce8ef619595936e630ca5bdccbfa2f52b361649b683b6c52d0c9c76314c2daabe6bca64e87c8dd242ec93c3
-
SSDEEP
384:Fc4iwbHaQEl5qtRLdXFbeKj8RZsnB25gkOYBS:Fc4eQdtRLJd5j0Ld
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcfa50f893df8b0001fa478c9c38aac7_JaffaCakes118
Files
-
fcfa50f893df8b0001fa478c9c38aac7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE