Static task
static1
Behavioral task
behavioral1
Sample
fdbd887ce9773690511ebbc717dc287b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdbd887ce9773690511ebbc717dc287b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdbd887ce9773690511ebbc717dc287b_JaffaCakes118
-
Size
493KB
-
MD5
fdbd887ce9773690511ebbc717dc287b
-
SHA1
c48fdcd10ea399654bb3d85825704200c91e28ca
-
SHA256
430bf0ce74e6be096e9910f97346e61c125ad04e08ae10f772fc588e072c6926
-
SHA512
5be17d237c9c358ff131394ecc1a12f32214d4e767924acd44fe7f9cc3bb4065bbaee5bbc28164fb3324764979206481808b174644c54c3d85c409d967ec5ad6
-
SSDEEP
6144:3IJ/N5GXadtcJeUth55C+pvCAcRcCmAH4ttI/wonOSgy19ZWZKUlxfsfok9mQpH:Yf5GKEgUycvCcCN/wZGWZ5l8X1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdbd887ce9773690511ebbc717dc287b_JaffaCakes118
Files
-
fdbd887ce9773690511ebbc717dc287b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 361KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ