Static task
static1
Behavioral task
behavioral1
Sample
fed11c03470d809867ea33f862212092_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fed11c03470d809867ea33f862212092_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fed11c03470d809867ea33f862212092_JaffaCakes118
-
Size
166KB
-
MD5
fed11c03470d809867ea33f862212092
-
SHA1
8d4fba080c33418175016d00758432abbfdedbf9
-
SHA256
ed3983aa7b23a60e432da18314d9f340dc196e3a2637630bec9c3e3f126c019a
-
SHA512
5d51998bf510a3f03688f367aa7d49aacf65035a65a67625358040ed67d1ab44841fb7a2e443248259335bc684df0b5bc42bb9ec5c7e2b10664c60a608a62195
-
SSDEEP
3072:MLJ/TA6mxP3/uyoe+91XPK9Aq85uydUbadohdcqoUAJ7HUzxk:KE6EPgXS9ZCUu2gqordOk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fed11c03470d809867ea33f862212092_JaffaCakes118
Files
-
fed11c03470d809867ea33f862212092_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 176KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ