Static task
static1
Behavioral task
behavioral1
Sample
fd6dfe58c07218e854434edefa71b3bb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd6dfe58c07218e854434edefa71b3bb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd6dfe58c07218e854434edefa71b3bb_JaffaCakes118
-
Size
23KB
-
MD5
fd6dfe58c07218e854434edefa71b3bb
-
SHA1
99e7bbfb25445f6c99eaa9c4924814074d88985d
-
SHA256
2d955af24fd736d64bcdd174abdb89d426e2a00e87f48df491dc08b7fd7c1701
-
SHA512
01f6b18ff37fa91a817990ef87a16bb5ab91310163ea9b5c0a29f950a5de4165da3fdffee64da2f388fefcded1a206c017245e0754f9b17f92a9ce479958b04e
-
SSDEEP
384:4E80M+Z+cLEDH8IdorE1KfpqjPZsoVx9cxylj1LFRqJfYYTKW9viDLfoMgIO/7zm:4Er+PYSCEkRqjOC6xy5tFmP9qDLiK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd6dfe58c07218e854434edefa71b3bb_JaffaCakes118
Files
-
fd6dfe58c07218e854434edefa71b3bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 984KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE