Static task
static1
Behavioral task
behavioral1
Sample
fee30241b993289c4f19bca6e122a237_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fee30241b993289c4f19bca6e122a237_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fee30241b993289c4f19bca6e122a237_JaffaCakes118
-
Size
100KB
-
MD5
fee30241b993289c4f19bca6e122a237
-
SHA1
42ff0d73af226a0bb2caec6e11751f190bf0e66e
-
SHA256
7a8b6f357f0fa57b8f1fcf915513d2791d7e4c58e2be284b28d05e2725fc6ff0
-
SHA512
7edb9d38af1eb712012fb1b53db5e6e3f0f0b7b99be67f0be4d37be4b83a7412da46cfc0bed939a31c4f1980e43bf13dd53cd24fc379094f40452360b0edb9a8
-
SSDEEP
3072:TFsouo+2MpfWuzcWt4JiF5izOlfGzBz5LQRL:TenBTziJs5izOl+zBVkL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fee30241b993289c4f19bca6e122a237_JaffaCakes118
Files
-
fee30241b993289c4f19bca6e122a237_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE