Static task
static1
Behavioral task
behavioral1
Sample
fd82d811bd6f26c1295425358c80e320_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fd82d811bd6f26c1295425358c80e320_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd82d811bd6f26c1295425358c80e320_JaffaCakes118
-
Size
352KB
-
MD5
fd82d811bd6f26c1295425358c80e320
-
SHA1
ab307fe6188f9d1411802b97a0b5503b4300b464
-
SHA256
e1bb867b46bd8e4521a4a52410bea55b35cdf2f4f78fde957f97905ca084b66e
-
SHA512
652c66fe2b4de576d04b10d23808042fd5f6bae750415fd3110dffa63707d4774c62bcf066c29f83c5533b10d8c856119d8034074cd0435a083d4e4a992cd20e
-
SSDEEP
6144:NRfYUuq68NQ96ae2Ids0ypr/s/FzzW5IzZpXvJUM8qjhr0CjI+l8ATvePwz:NtiSu6fC/G4wZpxUMZ0MLV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd82d811bd6f26c1295425358c80e320_JaffaCakes118
Files
-
fd82d811bd6f26c1295425358c80e320_JaffaCakes118.exe windows:6 windows x86 arch:x86
ea0e6b8624fb2d1fa46cff90e0138d2a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtect
GetLastError
Sections
.text Size: 342KB - Virtual size: 908KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ