Static task
static1
Behavioral task
behavioral1
Sample
fe4b17ca9344496d6911a8bad19f8a0e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe4b17ca9344496d6911a8bad19f8a0e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe4b17ca9344496d6911a8bad19f8a0e_JaffaCakes118
-
Size
512KB
-
MD5
fe4b17ca9344496d6911a8bad19f8a0e
-
SHA1
fe9624ea0d6e3e91b7e5b1d6f24fe9e576609a70
-
SHA256
a54b74ee4936d40c4507a81ae51d43c04dece8ccdcc98a46a3f0ea2d80973d72
-
SHA512
45dacc694d22942218bee21e35d71f0a5730e1386c0c51d3f2c25cd6b65e4749bfc1ab533aafade5570b098cc21b681ca0bf3a1b80cbe6e293583de0fb26390e
-
SSDEEP
12288:DLZEtJZgvmruG4+pfjbRKQMTvcFRQDu8eqn5IwJBoLF:DLZES4bRKRsRQq8eqnlJBg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe4b17ca9344496d6911a8bad19f8a0e_JaffaCakes118
Files
-
fe4b17ca9344496d6911a8bad19f8a0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 882KB - Virtual size: 884KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 362B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE