Static task
static1
Behavioral task
behavioral1
Sample
feb7cde4ed74c74e4b6b610930915d49_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
feb7cde4ed74c74e4b6b610930915d49_JaffaCakes118
-
Size
892KB
-
MD5
feb7cde4ed74c74e4b6b610930915d49
-
SHA1
9fe06de390cc11483a10e3101a7a1e62b8c4c62f
-
SHA256
e47f60d3b07822177a85414289a0b23050fa7f908d2e17cc6fa5524f1d395cc4
-
SHA512
bd9fe2627702211d5dc3a9db020757b0e69a57b1bd7dd9e1588b68d7be3c3d4a4c7292acd8f461ba2df19adbdfb6cc7586c26459ff3d123f448a9575f622906c
-
SSDEEP
24576:tqbIdkB4D8j+SagUvY7L5lGVWFcuQcJhActOjNW7Bf8+:mIWMPvbVq3JojNWVL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feb7cde4ed74c74e4b6b610930915d49_JaffaCakes118
Files
-
feb7cde4ed74c74e4b6b610930915d49_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 52KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 820KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE