Static task
static1
Behavioral task
behavioral1
Sample
feff0c4c41edc79e0ca11e5ea2ac24d3_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
feff0c4c41edc79e0ca11e5ea2ac24d3_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
feff0c4c41edc79e0ca11e5ea2ac24d3_JaffaCakes118
-
Size
103KB
-
MD5
feff0c4c41edc79e0ca11e5ea2ac24d3
-
SHA1
8df8e82e709fdb97e6a1e81258f57e7dd49c6358
-
SHA256
e70bfe82bb7506c4fdd23208ff4b590c8ca794d54f97fdf3b91d52e81494acc8
-
SHA512
40e6a948aab4c36e8cbb1c9fcd09c6c90421d12bdb8008f88e34c6502396367ed56da6829f89e543a11050ba7a25bd2bad82014e0a7f3f7455c59a6e5be8988b
-
SSDEEP
1536:hVGmc58YlO3EatgeAvh5srqw/Fyf/ppRDJW:hYmqlqVqTvbsOaFyfxrJW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feff0c4c41edc79e0ca11e5ea2ac24d3_JaffaCakes118
Files
-
feff0c4c41edc79e0ca11e5ea2ac24d3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 762B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 344B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PopSky Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE