Static task
static1
Behavioral task
behavioral1
Sample
fe06fde2f537311aa1b9c968318502a8_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fe06fde2f537311aa1b9c968318502a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe06fde2f537311aa1b9c968318502a8_JaffaCakes118
-
Size
758KB
-
MD5
fe06fde2f537311aa1b9c968318502a8
-
SHA1
30f22e91190170ee5bea47de52648fb527de39f5
-
SHA256
90957f120219ae05970a1f4d774a729c7a25fa6eaca04535deaa29ac6bf197de
-
SHA512
64a903891fb095874f53ea65f1ab716bc88fb20c3736695c22494ce3047f704fac163ac6215a8c67b68475fe826c955a4aee57cfed5171024b71f73661c256d3
-
SSDEEP
12288:iqp7TLkFkc3UXbEuUIN3nKEffRvHxXWa3hbi/JTvtTIXf0amVgct1x1rP1xT9u7a:ioyk/N3KaxXWa3V6+XcamNd1Bg6ld
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe06fde2f537311aa1b9c968318502a8_JaffaCakes118
Files
-
fe06fde2f537311aa1b9c968318502a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 44KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
,,, Size: 592KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE