Static task
static1
Behavioral task
behavioral1
Sample
fcfd0d80dad38ad5f492851796af88d8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcfd0d80dad38ad5f492851796af88d8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fcfd0d80dad38ad5f492851796af88d8_JaffaCakes118
-
Size
1.2MB
-
MD5
fcfd0d80dad38ad5f492851796af88d8
-
SHA1
54fa9e96e560a2d4b326bf8503cc7464fb07607d
-
SHA256
71f6eb1cb6395b223e5b1443e02ce3626147880f5d837d12097f70b47d489584
-
SHA512
c90111c44f543bf5be038c922e873d5ea6e7309414fed6a5e667f0f3755a029547c9ea2c7ed938e11222a1cdff41e9f90751974e34924b7d5bb5e0b41a4e6754
-
SSDEEP
24576:EJCbOBx7IAwU+W3kHHoYTchwxr5Ic6XeFJAJ9v5b87E+x:EJTBx7IPU/0H1xrR6X+A9q7h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcfd0d80dad38ad5f492851796af88d8_JaffaCakes118
Files
-
fcfd0d80dad38ad5f492851796af88d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 79KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
system Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE