Static task
static1
Behavioral task
behavioral1
Sample
fe5cd012540123488de2ee8a5e0e0fa7_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fe5cd012540123488de2ee8a5e0e0fa7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fe5cd012540123488de2ee8a5e0e0fa7_JaffaCakes118
-
Size
512KB
-
MD5
fe5cd012540123488de2ee8a5e0e0fa7
-
SHA1
76c04f93e8df91009fa3e8f3aa537d251032c188
-
SHA256
987bb3b6de40cf0a4a942e6dd43f88bb4baf1016c755e51208d2c71f28260d4d
-
SHA512
a00ffb0df9c874d3441230738ddc8db6cfdd291acbb50886b8618ff034ece56887d815b46b1885783ee8ae85ab767864ae9bd417bd78896a73c70fde952e1ed2
-
SSDEEP
12288:RQaAWqAeq/i5UupY40+ze6pG8mPNwx24WaVe/FUL1jiu++jLSoXB6d:RDwzeupY40XGG8mfFmiuljWox6d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe5cd012540123488de2ee8a5e0e0fa7_JaffaCakes118
Files
-
fe5cd012540123488de2ee8a5e0e0fa7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 885KB - Virtual size: 888KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 357B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE