Static task
static1
Behavioral task
behavioral1
Sample
fdf03f84b147620f626e843cceb15094_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdf03f84b147620f626e843cceb15094_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdf03f84b147620f626e843cceb15094_JaffaCakes118
-
Size
762KB
-
MD5
fdf03f84b147620f626e843cceb15094
-
SHA1
3e9c63ec478792a9afa01320b3d23c80a4e3037a
-
SHA256
d29f914f9df3eca83731bac366d8e40044cb07dc29f6bacdfd5bccce5918c82a
-
SHA512
097ce72428b651c5ce63177353ed131c4a8e077cb4363f7a0848384f656bfd76eb216cb7c1cfd8c0ec045a3fbd479c902e21770a18ca3c65b6bbc1eb2e98c99b
-
SSDEEP
6144:UZfec9EbXDk6Rk8KJrG1VVE+IaGFrQZb++tdsHP4+QfI6UsrG1VVE+IqUF4hrG17:UZWtI6RkbuZerQZb+md4w1U4uTa4lut
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdf03f84b147620f626e843cceb15094_JaffaCakes118
Files
-
fdf03f84b147620f626e843cceb15094_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ