Static task
static1
Behavioral task
behavioral1
Sample
fdf03530094d196384222d419eb202cc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdf03530094d196384222d419eb202cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdf03530094d196384222d419eb202cc_JaffaCakes118
-
Size
128KB
-
MD5
fdf03530094d196384222d419eb202cc
-
SHA1
04920ade22118e80757eee0428089ce7c27e2a87
-
SHA256
f98735fad642bc0644d2efb3fb47260ccbdc6e2b1c3b8afad94137ebf70a9602
-
SHA512
33dc4badd9ee377f82b01434824b689e3626e2f077ae5594c818e76ec59742d4bed83e7c33b3d5366acd223cbae554dc5764198b187cd103db0b6aedf820ffd5
-
SSDEEP
3072:5oyvU4mm/NvBfurQbJiRh8omK/M8dN8sicgBer8G4yyeDH:5Pwm/L+Ai06/d6dxz4H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdf03530094d196384222d419eb202cc_JaffaCakes118
Files
-
fdf03530094d196384222d419eb202cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
mwlcid9 Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
szslc Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8o5liu Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE