Static task
static1
Behavioral task
behavioral1
Sample
fd1ce5e6cc793fca7ed556f0120693eb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fd1ce5e6cc793fca7ed556f0120693eb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd1ce5e6cc793fca7ed556f0120693eb_JaffaCakes118
-
Size
863KB
-
MD5
fd1ce5e6cc793fca7ed556f0120693eb
-
SHA1
eb084cdde5f42ca2d2c71a637b4080d0dc9bb909
-
SHA256
f217aa1b3b488c672df709f43c160bf6df79731162d906bbb0ed6a739f1879b0
-
SHA512
291f93e9b1126e0463db8832a20e54942eb02ff4c56a4424c0ff16140a99f650a3e76a1de0a0bf113c8700ef2597871652c70b150e1cf0c48fc0f0d28aa56774
-
SSDEEP
12288:RmWWsG0MDVugbPXejoe54JgbjTJcw/Xb16i27BKDl+5WhK/44SisOoP3qWE8gJGy:RmWiPTG54JgL626iOx/4RiQE8gJG7zh8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd1ce5e6cc793fca7ed556f0120693eb_JaffaCakes118
Files
-
fd1ce5e6cc793fca7ed556f0120693eb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 646KB - Virtual size: 646KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ