Static task
static1
Behavioral task
behavioral1
Sample
fee0a24b7a81965c167fdf5d11753114_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fee0a24b7a81965c167fdf5d11753114_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fee0a24b7a81965c167fdf5d11753114_JaffaCakes118
-
Size
87KB
-
MD5
fee0a24b7a81965c167fdf5d11753114
-
SHA1
c49cd1d04c06227110f6199956f2b51da436d0b4
-
SHA256
4c7096c47d48c3518a4bf500696800947ac494fb8b0e93f441490d09a9f7f83a
-
SHA512
4e099eb66d1e94a4065044dbdb2488cc71ce9f0a509667bf05a1526ea14948bf57d52c253b4aba1e36ca77286746a8dd13f9ca14effe0982842a2a4ebeb6f153
-
SSDEEP
1536:cU3MbLyGOGCoDqOYP+PKCtE5f/vgkHvuxYnSSObGNNnNXXZRfB4VJuQTuwMwMmnW:N3MoP+PjtE5fJPWASSOwnNXh2JuQqtwK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fee0a24b7a81965c167fdf5d11753114_JaffaCakes118
Files
-
fee0a24b7a81965c167fdf5d11753114_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nwc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE