Static task
static1
Behavioral task
behavioral1
Sample
fd820a27d87d544e43e5c3fc46a20bbc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd820a27d87d544e43e5c3fc46a20bbc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd820a27d87d544e43e5c3fc46a20bbc_JaffaCakes118
-
Size
26KB
-
MD5
fd820a27d87d544e43e5c3fc46a20bbc
-
SHA1
9ee1388ba54734589aa84b3b37f67665cc39e171
-
SHA256
e3b5295f7c34566dc8e8986763b765d13f9245d71ba2a84e1a9d64e60e791e6c
-
SHA512
50163078362850e8a83c98d54af30fdf1b4899417690f3876620409306e74f86ea1fca2ce62405c3477c4f14fa1b46b67591fab3d1aadfaa15caa9632471cfd6
-
SSDEEP
768:T0QG2qk/NmU0bY3jBMP+MqGotMysAlvZORQ:Y92qklmU0qBTioeysAxOQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd820a27d87d544e43e5c3fc46a20bbc_JaffaCakes118
Files
-
fd820a27d87d544e43e5c3fc46a20bbc_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.idata Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3Ht8uQkg Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ