Static task
static1
Behavioral task
behavioral1
Sample
feac0d93d40fbe596e2d90da49b1ba89_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
feac0d93d40fbe596e2d90da49b1ba89_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
feac0d93d40fbe596e2d90da49b1ba89_JaffaCakes118
-
Size
97KB
-
MD5
feac0d93d40fbe596e2d90da49b1ba89
-
SHA1
bafec4a4b362cdb9bdc13dabd2963bb996627ae6
-
SHA256
4a07e51e22204804dc6ef076802ea39391a9a87b087bd4c53da9666bd6cfc30f
-
SHA512
366f14cd1aee2c8d0bbb40d93364f43071fc1c214f3486032d0dce054c5aaf0786cbfda2d200263e97bcddb7855af81ec8653134b1e9ad6297ca3e7b0c895164
-
SSDEEP
1536:fKO2fC1A7yc0e78zqCx5/HG8GyZNI3FWQRQZQSQLQoGbGVGBGfGuGxGWY8I2:CO2K1i9hCjG8G3GbGVGBGfGuGxGWYy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feac0d93d40fbe596e2d90da49b1ba89_JaffaCakes118
Files
-
feac0d93d40fbe596e2d90da49b1ba89_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 148KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ