Static task
static1
Behavioral task
behavioral1
Sample
fdfec8ddbfe6d4cce68867d739ce3a23_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fdfec8ddbfe6d4cce68867d739ce3a23_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdfec8ddbfe6d4cce68867d739ce3a23_JaffaCakes118
-
Size
87KB
-
MD5
fdfec8ddbfe6d4cce68867d739ce3a23
-
SHA1
1113d905b1f0b7be4a09a3ebb1d9ac739104857e
-
SHA256
42630f99a7723b0c82a2c78df8b428c1740f92af8cd3bab7c66cae0b236971a6
-
SHA512
45c9b24ec9bd1eb2496f77da36417e86440f4372b463201c23bf9d9fa049a5b11e9fb57ced4ac0faa77df2e87fbb0b7ad234663518098509fc4d3b8d88281f3b
-
SSDEEP
1536:onl4Vq48C/vX9bwWeE0StBmeBVfmwvw2mlkE7kQ9DuwJFEmZv8sC7KHKVxp4S/aT:onmVq4bH50SXlDfmwI2+7BujI8s0Kqzs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdfec8ddbfe6d4cce68867d739ce3a23_JaffaCakes118
Files
-
fdfec8ddbfe6d4cce68867d739ce3a23_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 84KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 703B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE