Static task
static1
Behavioral task
behavioral1
Sample
fec77981c8aaf45fcfc7b27934f13e5a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fec77981c8aaf45fcfc7b27934f13e5a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fec77981c8aaf45fcfc7b27934f13e5a_JaffaCakes118
-
Size
364KB
-
MD5
fec77981c8aaf45fcfc7b27934f13e5a
-
SHA1
22cfcdc7bf414c05ddef13263f9bec3540424c7f
-
SHA256
c6136e9713aadecddd55e582801db8bc424c848407874a9088d126c11d143edc
-
SHA512
30cb79533680a9d26b6b679259a8f2cd2fe1f84bd01531ddf6f772f1556985cdd4a5658bc0a0e783bdd14bfc1cc4b04f63afe7880e180b98bfdc15cc6340ece8
-
SSDEEP
3072:Et7cDBX0iItHBX4t9zhC7Q8sHvuh9K0iSU5rouAuy4qp95DeuBW2w1U4s85YgQB/:gO8bEg+5rO4cler2r9vYddHqJV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fec77981c8aaf45fcfc7b27934f13e5a_JaffaCakes118
Files
-
fec77981c8aaf45fcfc7b27934f13e5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 336KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ