Static task
static1
Behavioral task
behavioral1
Sample
fe260f9e5daa46f82996a5484faf6b03_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe260f9e5daa46f82996a5484faf6b03_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe260f9e5daa46f82996a5484faf6b03_JaffaCakes118
-
Size
447KB
-
MD5
fe260f9e5daa46f82996a5484faf6b03
-
SHA1
c74744b9e60c6f24c52f6089ae2bbf6fd6b16e66
-
SHA256
e7861f4f08095d1dc3b01524987231efc168b4a02a55eb912aa41f04af5c7ac1
-
SHA512
63058aa4041b3e28c1da44a3a755e58e3e9d89e0976e310fe21b832781b42498240ea78d1bb2a47353b0d4bf7ec2f5e74e395b44315a2540775c2fea5db2afcc
-
SSDEEP
12288:xq63pDGF/N1KMw3VVLryMOR1z74SYPC47e:AYpE1aVVLryfN74+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe260f9e5daa46f82996a5484faf6b03_JaffaCakes118
Files
-
fe260f9e5daa46f82996a5484faf6b03_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 438KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE