Static task
static1
Behavioral task
behavioral1
Sample
fe11ba73e582699d1b76cb9d45f8189f_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fe11ba73e582699d1b76cb9d45f8189f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe11ba73e582699d1b76cb9d45f8189f_JaffaCakes118
-
Size
192KB
-
MD5
fe11ba73e582699d1b76cb9d45f8189f
-
SHA1
66151b8a6efe533704c5cc77cda16576f69fcc49
-
SHA256
fb1bc03a1fc42b501059e3de85a3a5b9e056784b88cbfedc505ab48028f7c5fa
-
SHA512
24fb5df8df76984b721fd5f5404589987c7bb401a0a2d3654191e339bab98842fb7a274a52879217bcf5e64b8c2acd502e8eb7e8d77a30a5276732325f73aa4c
-
SSDEEP
3072:JXe2o3cwBYnUkQEX3uNhWL8b63PDlNtktCWmxogWW26lVvMU:JX7oBijQOubWL8w0tl6lVvM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe11ba73e582699d1b76cb9d45f8189f_JaffaCakes118
Files
-
fe11ba73e582699d1b76cb9d45f8189f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14.7MB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ