Static task
static1
Behavioral task
behavioral1
Sample
fec58cc80e64b12e680cad2d591e18a7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fec58cc80e64b12e680cad2d591e18a7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fec58cc80e64b12e680cad2d591e18a7_JaffaCakes118
-
Size
771KB
-
MD5
fec58cc80e64b12e680cad2d591e18a7
-
SHA1
8b83b03cc35b7a8fcb4ebc5e0eda1dc92b9e916d
-
SHA256
fc3dbc54ae6fb0d601f34cf43203d99a65f049a6966bceed45f2164c43443730
-
SHA512
2fa98a12bd2d2ae1a1383e8bb87b696877cc230b1a2cf4cb3257820b876bdd391b5aac532c106b4b1729f3cd6315c4010d6979e95803ec6e954e3daf8c434e2b
-
SSDEEP
12288:kZmEpha5L3bE4q2Z3FDQfpnLRT/yRDac8D6jDn7+tTTnLR:hLo4qk1DQf1RGRDacnDnE/V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fec58cc80e64b12e680cad2d591e18a7_JaffaCakes118
Files
-
fec58cc80e64b12e680cad2d591e18a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 560KB - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ