Static task
static1
Behavioral task
behavioral1
Sample
fd28c31630f233f9764fdb261c8653d4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fd28c31630f233f9764fdb261c8653d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd28c31630f233f9764fdb261c8653d4_JaffaCakes118
-
Size
499KB
-
MD5
fd28c31630f233f9764fdb261c8653d4
-
SHA1
596fbc37963bc7d93c39b7766b7bb29eb92a3cb0
-
SHA256
0bf9de16801c51af47c434aefb63148ef275e2fc32a90d5768121354bfdb0174
-
SHA512
492ff5cf772a29b8a704e852f5e6a36785738ba0fffcf4414efac06c416f500fab1653bdee57c3fb1633de50bd439216de6bf7b13656e87fd8d69faa0e4439b5
-
SSDEEP
6144:p741YHB3joXgRZGDvqA1T0/ZeTmY0G6jHbBNOAqroDm4FpgxPKl45O4qKnbKJfqe:p741QugRMD/d0ZO6hekFpyWUhnDe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd28c31630f233f9764fdb261c8653d4_JaffaCakes118
Files
-
fd28c31630f233f9764fdb261c8653d4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ