Static task
static1
Behavioral task
behavioral1
Sample
fde1fdd11875c3b9eee04ccff255a27c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fde1fdd11875c3b9eee04ccff255a27c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fde1fdd11875c3b9eee04ccff255a27c_JaffaCakes118
-
Size
240KB
-
MD5
fde1fdd11875c3b9eee04ccff255a27c
-
SHA1
6a6b7bbfda4bc8e3c534b7f28ee1bc3f29bf203e
-
SHA256
5454f13b001813de0c87e68653b006ec0a6e046ffc42c364da59254486f32e38
-
SHA512
7ca7d04b4b370c29b18b2d025ee8ac4a7241062f0603056b137a43e4862b7edff2c59c63467fc51bf68f275cad60431ba31da77e3ce46437c497d3714a7a853b
-
SSDEEP
3072:k1pW3LwjsXv8V2gVLnT2L4yTdmPrLyd02ZdSLY1i5MbhZkT0btNRPNe52sMoCaC0:8W8nTZ/eZdS3icT0btvPNSDC0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fde1fdd11875c3b9eee04ccff255a27c_JaffaCakes118
Files
-
fde1fdd11875c3b9eee04ccff255a27c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 260KB - Virtual size: 259KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ