Static task
static1
Behavioral task
behavioral1
Sample
fe0036113b0aeea9fca4c6bed1440c95_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe0036113b0aeea9fca4c6bed1440c95_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe0036113b0aeea9fca4c6bed1440c95_JaffaCakes118
-
Size
3.1MB
-
MD5
fe0036113b0aeea9fca4c6bed1440c95
-
SHA1
e5d31e8245c640ed111f31db86e2f7c8c2fa6c47
-
SHA256
baae36b8f450edb5f728c072f9b43fc6b3979bdf0ca5cb09e522961d136c0aa9
-
SHA512
7cdb7f70a00489225d8049d0096147bfe2e6090536b46789e0dd9126b7c452e343a924018e9e513154b6ee4ea31fabfdad4b36d330a71f1e1c699facd16d61f5
-
SSDEEP
49152:pdj0+u5cqV4YWJxqRLoegHYUsOrGSP6X/icEQwYpEFjwFC7+68p10DoLsP:p5svVF0wtFg4qGI6PkY6m6+6lYs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe0036113b0aeea9fca4c6bed1440c95_JaffaCakes118
Files
-
fe0036113b0aeea9fca4c6bed1440c95_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 364KB - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 13.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE