Static task
static1
Behavioral task
behavioral1
Sample
fe25e024e77d26a19475a01d0d0ab517_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fe25e024e77d26a19475a01d0d0ab517_JaffaCakes118
-
Size
1.6MB
-
MD5
fe25e024e77d26a19475a01d0d0ab517
-
SHA1
adcc658db42823f285677c21e013557310db3960
-
SHA256
f339379548105f17022b23c0fe880627c3f3ed80e3772e3528e24adb45c7f5e4
-
SHA512
9163b3236fd3a732aad5ca1cc197cab5d03e27b5fbb36c39b4a00809647a2eb9b783d0d05baf092b1118418e01c1fdc6d6edaa2e140603e7d7bd51a4e1af5ba1
-
SSDEEP
49152:EjLK/G5lmlTABMA1hL5w3j/z5xc56c+2SB:EHeGnoTAf7k1c+2SB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe25e024e77d26a19475a01d0d0ab517_JaffaCakes118
Files
-
fe25e024e77d26a19475a01d0d0ab517_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 308KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 460KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 871KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE