Static task
static1
Behavioral task
behavioral1
Sample
fdb7a0e1551a8b1d2e73c5d27c547b22_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdb7a0e1551a8b1d2e73c5d27c547b22_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdb7a0e1551a8b1d2e73c5d27c547b22_JaffaCakes118
-
Size
50KB
-
MD5
fdb7a0e1551a8b1d2e73c5d27c547b22
-
SHA1
6893502e4046f9ab7611ee9e4451259e08dfba8a
-
SHA256
ee49b1f44fbc54b48bfcd8e5bc3f675bf0132e309b3e748f93cf5bc27338a52b
-
SHA512
ad3a603fd870356cbb9cc9b42e5b4c548f56a90a53cf0254408cb5212007110dd8ce907421c947a64f56e9a5be1ee953dce69754883a7ce7e826878651cd0c88
-
SSDEEP
1536:wOyFAujtwuDsc1iiEbpDkjMPfCeX1H9dZF:wPFhPYcQfhX1HRF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdb7a0e1551a8b1d2e73c5d27c547b22_JaffaCakes118
Files
-
fdb7a0e1551a8b1d2e73c5d27c547b22_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE