Static task
static1
Behavioral task
behavioral1
Sample
fe7291d063a514ecd753c4c2a7c9cc94_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe7291d063a514ecd753c4c2a7c9cc94_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe7291d063a514ecd753c4c2a7c9cc94_JaffaCakes118
-
Size
1.9MB
-
MD5
fe7291d063a514ecd753c4c2a7c9cc94
-
SHA1
4f9535edb7bcb50bc291d60d1d19bc3f3393a62c
-
SHA256
37f9a191aa8ba965713f16739d09bdbaa72db1dd2ca76d3cd12c8515243a4558
-
SHA512
dceaee7fc0470ec8da3540e0442158b6d90dea366d4c8ca3f68aac0083dc1755dede5731928cac69b2739073f674f17265994bc0e4df5378e1681fe2ab29ebab
-
SSDEEP
12288:ljhGsCDquFYPq9IN/EhaWkJVqqbPdTBJQpuTTntPO2m1mWP+waCwT0QH1QlPpS45:ljhTEquyP4IoUdvFPfm1mKad7WnD1u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe7291d063a514ecd753c4c2a7c9cc94_JaffaCakes118
Files
-
fe7291d063a514ecd753c4c2a7c9cc94_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
hmimys Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE