Static task
static1
Behavioral task
behavioral1
Sample
fed79c041793e96521570bcb32c679e7_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fed79c041793e96521570bcb32c679e7_JaffaCakes118
-
Size
653KB
-
MD5
fed79c041793e96521570bcb32c679e7
-
SHA1
8cffc66147c613b1acf6bedf7b4e1d75191eda12
-
SHA256
f680a302ee483b85a0e2859cf2e868a33d5b010f485eb15bc869554c37eff32b
-
SHA512
e4bc3793c0ee1d1d2f99412ab417bf35ac61200cdd03ffc8fe9f3cbcc570c67a42b1d89288823173c601ae97290ba91136fd4164ccc111e7df76c8160f47379c
-
SSDEEP
12288:EL3iC3IoXhw7pl77p+5+rQg8ae2XxXjM8v0qG3QHfiaUNYI/FP4Kw:A3iC3G7r7k5IQYvXVM20F3QbUNYI/FM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fed79c041793e96521570bcb32c679e7_JaffaCakes118
Files
-
fed79c041793e96521570bcb32c679e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 800.0MB
.kwmsee Size: 615KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ