Static task
static1
Behavioral task
behavioral1
Sample
fe6504e2c7892e894f358541a157ad92_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe6504e2c7892e894f358541a157ad92_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe6504e2c7892e894f358541a157ad92_JaffaCakes118
-
Size
184KB
-
MD5
fe6504e2c7892e894f358541a157ad92
-
SHA1
4c65952341bd3a802cf5940c5f8d8a54c07fb45f
-
SHA256
b119619862044e3cd73a5c3f3efdb80f6d5a48031c0f6ca4235c17be45b8d552
-
SHA512
9182bf3c108b1a06ab98aa4103c146baa6c354db605a51d912acd84f09c8470f579f99a89cc102cbd346bdc8ffd5161ddd71da8eb1be3745d2751f94f5bbc547
-
SSDEEP
1536:S6wPc5GWEMAAF6OpCzdCe+xxXsBttF+rFT600+hNaaCswE/NWM1odyr3GRSgEnoq:UfvvOqCe+xCXF+p/4hEVWMWk3Gmoutd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe6504e2c7892e894f358541a157ad92_JaffaCakes118
Files
-
fe6504e2c7892e894f358541a157ad92_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE