Static task
static1
Behavioral task
behavioral1
Sample
fe2eec0806611fb41dfb6e88db6618ad_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fe2eec0806611fb41dfb6e88db6618ad_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe2eec0806611fb41dfb6e88db6618ad_JaffaCakes118
-
Size
105KB
-
MD5
fe2eec0806611fb41dfb6e88db6618ad
-
SHA1
b4e9e9b38dd9ede151efb18a45c34ac92c4a9ab7
-
SHA256
550e6c8e651eeb6491799959b3f5b6db37a15cc8570a2782d0611af3b300bdf8
-
SHA512
db3eb14c57a31108037c9b6322c2f42871ccbb5ad6ff6068cee39dd504e956382ea118688b17718baf7430d6481c18b0359479bbbad85021299de965aaef12a6
-
SSDEEP
1536:3Bpc/ap7FGxJ3pY0CKvKLDXg2NuOMTbbHHlpnk6G+KzRHSVwvZtM6U7sHf5K9/z:3BP21CKsX9Nu1TbDDJpxVatMD4fApz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe2eec0806611fb41dfb6e88db6618ad_JaffaCakes118
Files
-
fe2eec0806611fb41dfb6e88db6618ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
wv Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5w Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8fcayll Size: 851B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE