Static task
static1
Behavioral task
behavioral1
Sample
fe6ec526f658daddbea02051eba8a2f1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe6ec526f658daddbea02051eba8a2f1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fe6ec526f658daddbea02051eba8a2f1_JaffaCakes118
-
Size
154KB
-
MD5
fe6ec526f658daddbea02051eba8a2f1
-
SHA1
3428c0ebcc0d93a4e5ee75b0d23f13786942d6f9
-
SHA256
710f15be4c2ec3b1334ed2edd428036b84cfb913899a029b0e974e89114cb58e
-
SHA512
e8b64e830e823c40f5bb99c878c757bb982050919bf9fd4d7ca88cfb6d46dc4f74e42c8670b2122cc36fed16d36913ee4b098b2718eb9f0f84f4cb740f0bb17a
-
SSDEEP
3072:veOcvPS0jU8ul6nVH7POaEONZm2RtjAisTujsUtbcO9zAD5HLLWqHFNbsDkvJDs:2PvtjUN+VbPOaE4Z/MisemvtlNcmDs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe6ec526f658daddbea02051eba8a2f1_JaffaCakes118
Files
-
fe6ec526f658daddbea02051eba8a2f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wjyl1 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccg Size: - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lhhack Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE