Static task
static1
Behavioral task
behavioral1
Sample
febc314fec0a8b1c95c1069b9ed30337_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
febc314fec0a8b1c95c1069b9ed30337_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
febc314fec0a8b1c95c1069b9ed30337_JaffaCakes118
-
Size
72KB
-
MD5
febc314fec0a8b1c95c1069b9ed30337
-
SHA1
2203dac33fced0362acc7de73c240dd9e9a943a9
-
SHA256
8a14b37f36ed3ebdf2f9d0889ed8166ac3b435357c8e9ec50ace4788aadf6fcc
-
SHA512
826527938ef6373dbb0571c047f3c713ea5bdd506bcaf7e3af2da6e3b2245a91e92b1860ca7290f76834d834cfac05ed95461a4635683f3e06a44d3121d25bc0
-
SSDEEP
768:I1aRRjXYRaNkihsdxu+eZGGkCbJkwof5yJCb3NngDKrK:I18ZIi3YyKMVC5gCl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource febc314fec0a8b1c95c1069b9ed30337_JaffaCakes118
Files
-
febc314fec0a8b1c95c1069b9ed30337_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
PS�ի��� Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�@���@ Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
t@ Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE