Static task
static1
Behavioral task
behavioral1
Sample
fd8ef6b183367b3ab238f352caa402d7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd8ef6b183367b3ab238f352caa402d7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd8ef6b183367b3ab238f352caa402d7_JaffaCakes118
-
Size
883KB
-
MD5
fd8ef6b183367b3ab238f352caa402d7
-
SHA1
3bc23e8dfb822d90f5462512718f0ce3bcd46488
-
SHA256
459e1a59abb79f29b0cb70e416fe106f1f7b8df8f41743304d8c33ecc7ee3b93
-
SHA512
b6e135473ff53e82804fb8d35afe88b4b8fffe89c95705894898cb2304f3e3d8fa9bd972d7478cc60dae91ac8297d60862b973ecd59f8ccc6e4413dd21a15020
-
SSDEEP
24576:XStPJgsmFOGPnHNop9IJU/Rl8NdJ+DDDZ:C9JgNOGPHo9I0Rl4J+TZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd8ef6b183367b3ab238f352caa402d7_JaffaCakes118
Files
-
fd8ef6b183367b3ab238f352caa402d7_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ