Static task
static1
Behavioral task
behavioral1
Sample
fe15e6fdc34b528c852ef9c490530401_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe15e6fdc34b528c852ef9c490530401_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe15e6fdc34b528c852ef9c490530401_JaffaCakes118
-
Size
214KB
-
MD5
fe15e6fdc34b528c852ef9c490530401
-
SHA1
21b26c89dfb1719b77d3a1d19c3ed626fac04041
-
SHA256
b9f04e269a81d38d44e02566a92a850f1170f8abd0746f2233dd754b28ebd5fd
-
SHA512
ab7dc3f3fa9b265193584fb0dd3fd1617b87a11456e652cd6a39ed2f79dea707dbcb1265367882798f3aa342f13b8642b6f990aedf9f68982a441627a4b8cea9
-
SSDEEP
6144:AkfBvMTKUN6SlCB00LLnqeekU6h8PnjwWDiNcq:LfBkTKxSlPgLqeekwPjwWON
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe15e6fdc34b528c852ef9c490530401_JaffaCakes118
Files
-
fe15e6fdc34b528c852ef9c490530401_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE