Static task
static1
Behavioral task
behavioral1
Sample
fe1fe61e0b92a9809db15e9416c4ffbd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fe1fe61e0b92a9809db15e9416c4ffbd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe1fe61e0b92a9809db15e9416c4ffbd_JaffaCakes118
-
Size
175KB
-
MD5
fe1fe61e0b92a9809db15e9416c4ffbd
-
SHA1
9ea97a4b4a5d547259256d05715f6811729ca755
-
SHA256
2dcf0617ff6d218782e6ada6667319539fda1be76b24781e7902c7b15a5304bc
-
SHA512
b315aebb9d64ee8ea38b8e884f2f9aed6986ec4ef765a545e25ae54c9050aef19ae07c62a2e9f561684a0f7a8fd5433403fe6baf131a0c32f04ddcffd2d21198
-
SSDEEP
3072:9zbEBk6WEDglPPkpEkt6Enezpo9Ke6ZI7DlQVPvO7VohXluxqc+hFdV6Nu:tbEBk6WPYtjMocpGXsyVSlYqcAdVUu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe1fe61e0b92a9809db15e9416c4ffbd_JaffaCakes118
Files
-
fe1fe61e0b92a9809db15e9416c4ffbd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
RDGMax Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RDGSoFT Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2k8 Size: 159KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE