Static task
static1
Behavioral task
behavioral1
Sample
fcfa63d17985c93498c1f1f52cf62cc5_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fcfa63d17985c93498c1f1f52cf62cc5_JaffaCakes118
-
Size
1.2MB
-
MD5
fcfa63d17985c93498c1f1f52cf62cc5
-
SHA1
911b44273ec4f58b6a4810013317a8c4fb77f7e1
-
SHA256
2e5266b9f59296fd3a4133d5d33fa87b75cacba0d406e0683e93ebfe714f8b17
-
SHA512
dce741c991c85598c6194b122138090873b299ea3221a343af057878ba892c9a73164634331a202c348dd55d94ffd1f400bcd28c9abbe97c9f073e5341b3b1dc
-
SSDEEP
24576:cyEmvzNxyfaTsNMWrKIHZkhf/Jrkk+W5g3X/ZBEA96rG3On5FzH:7Em4MGMIKu27+5X/ZOFrG+n5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcfa63d17985c93498c1f1f52cf62cc5_JaffaCakes118
Files
-
fcfa63d17985c93498c1f1f52cf62cc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
||||||| Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE