Static task
static1
Behavioral task
behavioral1
Sample
fdae2bf36e12dac6bf3654f7620bbfd1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdae2bf36e12dac6bf3654f7620bbfd1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdae2bf36e12dac6bf3654f7620bbfd1_JaffaCakes118
-
Size
525KB
-
MD5
fdae2bf36e12dac6bf3654f7620bbfd1
-
SHA1
48455aedf3c22f0ca230eeda6ad024256bf4af7b
-
SHA256
7b30cf3675129a0c5a2345af95b090c7a6c5c742fdc93e4e0387dcb49e00a9ba
-
SHA512
89545606193f384d8a879bfb26decf9b8170706bd54e3eed00a9bb8696ec0112dd4e7eec5318da46282bff89bf6146b8c61ad7b28e0cbae55b949edd70908ead
-
SSDEEP
6144:BuxMSbxohE9q2PsXrSVew/X2+wZHeSPVep6s6BCF6GfEWfadRNH0QX0oSs:BkNx2E9/cZw/X6eSPtfS6G6j0oSs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdae2bf36e12dac6bf3654f7620bbfd1_JaffaCakes118
Files
-
fdae2bf36e12dac6bf3654f7620bbfd1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 348KB - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 174KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE