Static task
static1
Behavioral task
behavioral1
Sample
fdf17250baeda2cf6acb65fa745454c3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdf17250baeda2cf6acb65fa745454c3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdf17250baeda2cf6acb65fa745454c3_JaffaCakes118
-
Size
27KB
-
MD5
fdf17250baeda2cf6acb65fa745454c3
-
SHA1
2cadabc31da084aba1bc89332b79fa0ec9685df4
-
SHA256
b7df5cbed41f2c85522aaa07dd63f70a72925d709e20762232d0a63fa6c78949
-
SHA512
4e2916ee664985007bf2dea6981e38175de1edc88c4b12c2159b828742820a819cc05dbf25761c035397d4061364673999aa52d4788c9a92c6e3dd7e48b52a41
-
SSDEEP
768:Yrv9IIdhS5X8FvWOJX0kfuDPQQruAsApT/OoNh:Yr1ndhS8RJ+RriET/Oo7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdf17250baeda2cf6acb65fa745454c3_JaffaCakes118
Files
-
fdf17250baeda2cf6acb65fa745454c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
b7aa5ad21fef535197ce43d189c00604
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteAtom
Sections
&u#�,� Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
1��^��� Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
`�[�ٌx| Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ