Static task
static1
Behavioral task
behavioral1
Sample
fe0d67953ff46d38e5d3cc8e3915abfa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe0d67953ff46d38e5d3cc8e3915abfa_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe0d67953ff46d38e5d3cc8e3915abfa_JaffaCakes118
-
Size
197KB
-
MD5
fe0d67953ff46d38e5d3cc8e3915abfa
-
SHA1
c454cab8b1404296b1251f4ec40ec29bd22d853e
-
SHA256
33a19162728c9af36c74146958b8550457099112c60c6730fc26347f10bba150
-
SHA512
6f3fc35e951751792fdd2366e9119ab7e478c5d850c1b636ae9122a224a84ed42603b28516eb15b033f548eebb16ec497e3cd6aad88cb287dd2a5a6e89d93102
-
SSDEEP
6144:ioTRo1Hgbycwy/i+3ukeGxNu4DsEqqI1of4Ij2g5DZubRcaHLAOVst0SfxS+ZX4Q:iYoRGyc7/i+3ukeGxNu4D5qqI1of4Ijw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe0d67953ff46d38e5d3cc8e3915abfa_JaffaCakes118
Files
-
fe0d67953ff46d38e5d3cc8e3915abfa_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ