Static task
static1
Behavioral task
behavioral1
Sample
fea68aea123bb006a43f1f7f36b1e861_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fea68aea123bb006a43f1f7f36b1e861_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fea68aea123bb006a43f1f7f36b1e861_JaffaCakes118
-
Size
9.6MB
-
MD5
fea68aea123bb006a43f1f7f36b1e861
-
SHA1
626b2d3696b6c10ce0cfbda13058a729900dd31e
-
SHA256
f36c9fd2fda3130cc1ea4c273a6694cad134b5c0721dfe470c4966774b334ea7
-
SHA512
ae3c251c2c8a0a3fe1bcee417e6fe7d8382ada0709c43081295414a86117cad4fdbaac90e260d61d22a9e3f930ebf8b11609e061f25f9254bcfef5fe4d7405f8
-
SSDEEP
196608:SdMw94tdbWs34y+We/YUPT8W99mk7HYSxh9rboQeTAs3J2GpXcADV6C1MgISfXq+:+Mw94tdbWskP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fea68aea123bb006a43f1f7f36b1e861_JaffaCakes118
Files
-
fea68aea123bb006a43f1f7f36b1e861_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 384KB - Virtual size: 9.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE