Static task
static1
Behavioral task
behavioral1
Sample
fdce8fd194b481f368d79a676cd9af1a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fdce8fd194b481f368d79a676cd9af1a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdce8fd194b481f368d79a676cd9af1a_JaffaCakes118
-
Size
110KB
-
MD5
fdce8fd194b481f368d79a676cd9af1a
-
SHA1
c27b9f0c0ae923e475e7c71125ccb0e5c87eb6e4
-
SHA256
08d1ee6bd88d93db92589d82a016c59eddd3ba8df2fa14d0af4e07116a705fee
-
SHA512
90fdc8667ed7bef1d06def67e4419c67ef178b55761184ff59aa51f0babd62a2418c939a9eda9a210b7292a3a0594a54a17b0e5b3e5d35e83a476def53f83c25
-
SSDEEP
1536:Ql5pxe1s0XN+9Yxm7HPGQKfq54JL20BN/urWqAqsr/RPhUypjJ+WlwkQaN7APfMy:Qjbed+9cwPGXSgL2pPqROoJblwCKMaPJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdce8fd194b481f368d79a676cd9af1a_JaffaCakes118
Files
-
fdce8fd194b481f368d79a676cd9af1a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE