Static task
static1
Behavioral task
behavioral1
Sample
fe494742fa338589ed4c764f0d034dc9_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fe494742fa338589ed4c764f0d034dc9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe494742fa338589ed4c764f0d034dc9_JaffaCakes118
-
Size
41KB
-
MD5
fe494742fa338589ed4c764f0d034dc9
-
SHA1
84bac0f96727361cfc952530e7e9a30e531cba2c
-
SHA256
c088555e0c9d9bf0c9ac12562739892952695e3253fa0e70eb789a61513fe816
-
SHA512
95ec33d21929dc9c62371d770ca9f5e2947a0e081941345da7dad227798087921d2b4c7fae1d81ee39bfcb61a4ec0df1861bb65df2e982211a943b70bc97477e
-
SSDEEP
768:NIzp5yEG7ubu0OaBXYVJdknrl46dOvvrdzK1twkDb1sMwBZH:gMEG7xvaMdknrivrs1tDbuLBZH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe494742fa338589ed4c764f0d034dc9_JaffaCakes118
Files
-
fe494742fa338589ed4c764f0d034dc9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ