Static task
static1
Behavioral task
behavioral1
Sample
fe1e0630ff80a72c72d77d4f3a60aa58_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fe1e0630ff80a72c72d77d4f3a60aa58_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fe1e0630ff80a72c72d77d4f3a60aa58_JaffaCakes118
-
Size
56KB
-
MD5
fe1e0630ff80a72c72d77d4f3a60aa58
-
SHA1
fcf5a6d4bfbdd1a2b883a2904519e04b41d2c42b
-
SHA256
0d11d6e78bc42eebccacfc2e4203d9788629208517e79598726d250f329a86f5
-
SHA512
c5f519d95ffb71f58ec11b4a521d13383dcc959153d368392e37dd2b6345d7207321176a8d044bb6f007293bc7ced9ea03e7d26988a88d25f3a53148086daa0f
-
SSDEEP
1536:SymqL++sDgYupdGp/hXJ1ITvItc+3ghMH7:SwLUzTphkk6+3g2H7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe1e0630ff80a72c72d77d4f3a60aa58_JaffaCakes118
Files
-
fe1e0630ff80a72c72d77d4f3a60aa58_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
un000 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
un001 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
un002 Size: 212B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE