Static task
static1
Behavioral task
behavioral1
Sample
fe5480c20536ceb17b86e723866075e6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe5480c20536ceb17b86e723866075e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe5480c20536ceb17b86e723866075e6_JaffaCakes118
-
Size
15KB
-
MD5
fe5480c20536ceb17b86e723866075e6
-
SHA1
4a5f1756c82886276beebddf417f6bd77932ad1d
-
SHA256
39f56e7460d4cac08151638fe18531d668bf8eb4a404f3d5f905c93ac72a56d7
-
SHA512
e1c7b0c49042f753cfb4e0e3dc8a4f5454bcbb2f827a1acf9d2a53674a0bb59708104807e6e299c397bbf8b9c4ecd7debb70d38f3838ff409acd8174ea5f2e83
-
SSDEEP
384:HZjqzP8Zj3MRB0upKkFqlwOZjPsVanH7UHjNYDJaNJawcudo/:H5QiMTl3qlRsYnH0NeMnbcuy/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe5480c20536ceb17b86e723866075e6_JaffaCakes118
Files
-
fe5480c20536ceb17b86e723866075e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE