Static task
static1
Behavioral task
behavioral1
Sample
fd999099404ef0c514336b1cdc3b09e6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd999099404ef0c514336b1cdc3b09e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd999099404ef0c514336b1cdc3b09e6_JaffaCakes118
-
Size
640KB
-
MD5
fd999099404ef0c514336b1cdc3b09e6
-
SHA1
6c541c0b6942d24b6085483f9006f265180bd6df
-
SHA256
ee79b9254a5d694bb8f318c6af28370a743788c6c925e5c16982ed0de4c3094f
-
SHA512
f5869c6051d3155207d7debaa73044ae62b2af86967f08d200c7b186eb7b3a2ce5d58919c20be129e23dbb9e3c357423980dcda0048edb3424efb42480a9fd40
-
SSDEEP
12288:vU+D96P+FlVKtEewj0UrWZAWiN5u1Jtv1tO3MpzSZ1c2obY7i2ymsdM8XKamkTuw:vU+DgmFmVj368ENoc2mWXRmS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd999099404ef0c514336b1cdc3b09e6_JaffaCakes118
Files
-
fd999099404ef0c514336b1cdc3b09e6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 375KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oiwin Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE