Static task
static1
Behavioral task
behavioral1
Sample
fe083730f249a59cb5d44b7493719c8d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe083730f249a59cb5d44b7493719c8d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe083730f249a59cb5d44b7493719c8d_JaffaCakes118
-
Size
105KB
-
MD5
fe083730f249a59cb5d44b7493719c8d
-
SHA1
00b366551030d6d20d31c7254636cbceabb53eaf
-
SHA256
b9cb66231d99d3454903fa15e26ca2ebd7ae5595d8c7301703ede7b9bfd0f3ad
-
SHA512
8307f12ab99f95441725e5d495420fa4f16f8952857a8aff790ad44e8e7cd2d6cd02e1655e73043b4f52c85dc05ecc524cdac61d98f4b8b0e89ef558ad062934
-
SSDEEP
3072:SNjLT2DCigO1FmZHHtFu6PNrHv8yzDkhecPPGJ:SNT2WiFjCNrHv8yzDmecW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe083730f249a59cb5d44b7493719c8d_JaffaCakes118
Files
-
fe083730f249a59cb5d44b7493719c8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ