Static task
static1
Behavioral task
behavioral1
Sample
fe5487b2346837a85b90889737e7c192_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe5487b2346837a85b90889737e7c192_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe5487b2346837a85b90889737e7c192_JaffaCakes118
-
Size
80KB
-
MD5
fe5487b2346837a85b90889737e7c192
-
SHA1
514616fc87ce89ccf7a2408de4a009a33ff22d5e
-
SHA256
899ab96fc431bcab6105eb0bec86fde6f6d12a70a58a881a9d71f0d7c5bc4e73
-
SHA512
c9bca225d99a11ff23b4aef901f466d6012ece136075da4057bc3ae9aac48749d711b8c5d0c16b3ef973a52730d2dec64501f4651a8916af87df31792ed668ba
-
SSDEEP
768:KeDoXG4q+BA2iifyzJ3RGK4q+BzPGeBardp+z7IOwkopp6YDz:9cXXqiwiazAqiPCc7zO2YDz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe5487b2346837a85b90889737e7c192_JaffaCakes118
Files
-
fe5487b2346837a85b90889737e7c192_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
zeep Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zop Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE