Static task
static1
Behavioral task
behavioral1
Sample
fe33c785c6a11ca798ca7f0ce5212cfa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe33c785c6a11ca798ca7f0ce5212cfa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe33c785c6a11ca798ca7f0ce5212cfa_JaffaCakes118
-
Size
98KB
-
MD5
fe33c785c6a11ca798ca7f0ce5212cfa
-
SHA1
9ba2977956ccd32cb933caf4247a4ae1e9aa9265
-
SHA256
d79f426bd89ffcd3418a2be82c5ee1573ca2906eee0acb501a31694ce48144ce
-
SHA512
5622213b8a1e7d61c23f3b3a15c8adc454d78cf89f88281eeae58563c985aac7bd8c9c8d52d36fca87f5b1b7dfa7c960d59c18b6b772a26b2c0e2f9915384454
-
SSDEEP
1536:Jr0UsoHIPfSpGTsszjcLiiM1yEuooh8iZAvXuTJ2ElYT4HncbVb9eengp6oQQCyb:JrU0IPKgYpSwhMvXuTJKkHnGVb9eNXh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe33c785c6a11ca798ca7f0ce5212cfa_JaffaCakes118
Files
-
fe33c785c6a11ca798ca7f0ce5212cfa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ef Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5dl Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jplycdqn Size: 4KB - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE