Static task
static1
Behavioral task
behavioral1
Sample
fe5f7d0a23e1b7689e16dd49d99eebad_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe5f7d0a23e1b7689e16dd49d99eebad_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
fe5f7d0a23e1b7689e16dd49d99eebad_JaffaCakes118
-
Size
59KB
-
MD5
fe5f7d0a23e1b7689e16dd49d99eebad
-
SHA1
18b84b829e73d366078b279fcb4697cd2b92a9c3
-
SHA256
47df57c5e1be33875697cbfc5fd8f5c59aec586de24f82ae9c66ab91d09ec544
-
SHA512
7be3a8d5d7f60e0ec9557096147d81b76f973be0e8790c25eec31c0f2bb7fd58128b02dbc90b293dad16d3fb83c3b4d6dce61ce6db74e1489b0afbef342fbc22
-
SSDEEP
1536:Gsq55J1sotYRm9j8Ko2k17GfO+ok0kxX:K5J1/YRsO17Kkk0kxX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe5f7d0a23e1b7689e16dd49d99eebad_JaffaCakes118
Files
-
fe5f7d0a23e1b7689e16dd49d99eebad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ