Static task
static1
Behavioral task
behavioral1
Sample
fe3a4279203db756005cadd88305a406_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
fe3a4279203db756005cadd88305a406_JaffaCakes118
-
Size
495KB
-
MD5
fe3a4279203db756005cadd88305a406
-
SHA1
5e162186923111f6dca4d24f59e746e8514bbe0d
-
SHA256
c6e6f0be0a2f2deefa2eb25865dd2db2aa75aa923198659101c7b46675c738e0
-
SHA512
7e2481f67843e716f7658f88825607f7826edcfc5d1a4906f088ffd9277b372e9753559808b9543fdff9573f626a643c66b899374cd640737ad8c3e2d8c96364
-
SSDEEP
6144:BeUhkAk6wZPF/G7kq3V87r74JVIBeJeZQNqK31lfbZEUQOYj05k2bpoB/bhUJ:BHVO/wkq3mnWVIB/ZQZ1qU3FS2bC/1e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe3a4279203db756005cadd88305a406_JaffaCakes118
Files
-
fe3a4279203db756005cadd88305a406_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 482KB - Virtual size: 482KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ