Static task
static1
Behavioral task
behavioral1
Sample
fdfc276c8106e189e413db0b6f4462f9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdfc276c8106e189e413db0b6f4462f9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdfc276c8106e189e413db0b6f4462f9_JaffaCakes118
-
Size
11KB
-
MD5
fdfc276c8106e189e413db0b6f4462f9
-
SHA1
7e6a9ea7749ef3f373a6553a603e0b64070a5840
-
SHA256
a87f3f0313d5454b6f06c38d2f027fa8a3ce1bcc10e95614ad8d2f07f9807001
-
SHA512
b37f1ac54715e32718b41f64c26162a0efdb25c82bbdeac7c6f1a81b995c19c421f4d48f2aaf64c570fd848158ad6a653377bfa2ebeb1f2ca1bf585c0de903bc
-
SSDEEP
192:cHJJJJZHXpuKIxadFJnKDts8sAIc2V1edgE6U5tIco15bCTJa1+sgDB8ALn3h5NH:cRMKwadFxKDtsnia+bugJaIPDBFR5NH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdfc276c8106e189e413db0b6f4462f9_JaffaCakes118
Files
-
fdfc276c8106e189e413db0b6f4462f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE