Static task
static1
Behavioral task
behavioral1
Sample
fe3fb32838d75d601a43989e32358f0f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe3fb32838d75d601a43989e32358f0f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe3fb32838d75d601a43989e32358f0f_JaffaCakes118
-
Size
326KB
-
MD5
fe3fb32838d75d601a43989e32358f0f
-
SHA1
b70294f67629883fe9e720983e90c5fcd562442e
-
SHA256
1c588bf747175b745eeebb4e9d03f5711fc7546a9f7b575a1ad4fe01d6245d4e
-
SHA512
1d780b7a4a98960b04330b0b24e3ffd33eeda9b022d14160117fb1d174f183fcbee8e9dff0b7293ea162444cf749e64323bd27018f138b9155e6eb74e07c906d
-
SSDEEP
6144:FTF5Q+2Tubju8ER6lqg/gneifdOM3J4CfKx/8GcsMBvMCmJpnHuXUn:hFeO8g/yV13Jx+esTCmDKUn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe3fb32838d75d601a43989e32358f0f_JaffaCakes118
Files
-
fe3fb32838d75d601a43989e32358f0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 106KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE