Static task
static1
Behavioral task
behavioral1
Sample
fdff95bf6b6becf16198bd5e6a31c5a3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdff95bf6b6becf16198bd5e6a31c5a3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdff95bf6b6becf16198bd5e6a31c5a3_JaffaCakes118
-
Size
6.1MB
-
MD5
fdff95bf6b6becf16198bd5e6a31c5a3
-
SHA1
7db7e26a7da928ce60852381c331a975eb13d235
-
SHA256
7bb9fd619a573ecbda313480f056353e8da41dfe63f4a34be4f10bd507bd3433
-
SHA512
98616bb6eff19543705b3ba8f6ec4582caf19002aa5ac223c3a9d52c82e3af5e3e7259f5187300ce94ee4257f9a682172e0d5d3958b1a97530d84c272f4ced7a
-
SSDEEP
98304:irQZ6rQZBrQZ6rQZBrQZ6rQZBrQZ6rQZBrQZ6rQZA:ir26r2Br26r2Br26r2Br26r2Br26r2A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdff95bf6b6becf16198bd5e6a31c5a3_JaffaCakes118
Files
-
fdff95bf6b6becf16198bd5e6a31c5a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ