Static task
static1
Behavioral task
behavioral1
Sample
fe1e18df6fc259ca1b90f59863eaf5e6_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fe1e18df6fc259ca1b90f59863eaf5e6_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe1e18df6fc259ca1b90f59863eaf5e6_JaffaCakes118
-
Size
192KB
-
MD5
fe1e18df6fc259ca1b90f59863eaf5e6
-
SHA1
cbc2a309562d7a2a4731a77e759e1d89d68c69df
-
SHA256
00f349275e9995b207b05832647635196acc8c4ef72e872feda54713d82fd564
-
SHA512
61809b34656b5dabb52d8c181e9dde66b900655e6bc9e29306701df655af22945b4a2e72e3967ad81249c5b251c7334e89dae6259eb29682ffb66040c8adfb61
-
SSDEEP
3072:YY1g4SmDCvkLQJYRut0HiC/QK609ShM2D8geVMwGUwzNVTeOgfomoaHP2600Laao:YYGNmDCM+yHiSQ/096QCwMz2OgfomoaK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe1e18df6fc259ca1b90f59863eaf5e6_JaffaCakes118
Files
-
fe1e18df6fc259ca1b90f59863eaf5e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 71KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE