Static task
static1
Behavioral task
behavioral1
Sample
fe4712faf5e2da254c1ba4e45ee4f8f0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe4712faf5e2da254c1ba4e45ee4f8f0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe4712faf5e2da254c1ba4e45ee4f8f0_JaffaCakes118
-
Size
627KB
-
MD5
fe4712faf5e2da254c1ba4e45ee4f8f0
-
SHA1
f21c72b3fe08936a03fbb067e0a7c2a293599d9f
-
SHA256
cd7c3820d526136fe391d5d21d75d307ce6ee67ad41012c9339585589c53f825
-
SHA512
bd472fe8c58ef8c243949ad423bf326afde75792c2f30a71601fbe96be50167bb8dae4f255ff183315e32901d41ce36df620ffd57eaf10430413fa5127e4e40f
-
SSDEEP
12288:uJGvM+wcMloUC+3dH30i7H9hUUbgqpg9YgR:EGvROg+3dECH9hTbgd9YY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe4712faf5e2da254c1ba4e45ee4f8f0_JaffaCakes118
Files
-
fe4712faf5e2da254c1ba4e45ee4f8f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 256KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE