Static task
static1
Behavioral task
behavioral1
Sample
fe96ce4fafa384407d716c827c6ee36c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fe96ce4fafa384407d716c827c6ee36c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe96ce4fafa384407d716c827c6ee36c_JaffaCakes118
-
Size
1.2MB
-
MD5
fe96ce4fafa384407d716c827c6ee36c
-
SHA1
0f22e9c5e345b33790c722882315f2fb9a2a9ff6
-
SHA256
e6a1aa96556c1abc0612c28394514d82a1087ad0b473f7d458e2ab231c18d002
-
SHA512
cc92d818e032b8614209812d2332b12716aba15c9208afbc0f96691d688fb472c644a1c625f31886af567738c850024f283ad276dc3dd190756480cfd16e5c3e
-
SSDEEP
24576:Wh1J0eKSTfuu7ZZlle2QpIkaCSYlG2nZk5C20zVnPO6:WnJlKGfxfvJQNSYsF5C20zI6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe96ce4fafa384407d716c827c6ee36c_JaffaCakes118
Files
-
fe96ce4fafa384407d716c827c6ee36c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.4MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE