Static task
static1
Behavioral task
behavioral1
Sample
feac1bd72649e3a6d4e2622615e4004e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
feac1bd72649e3a6d4e2622615e4004e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
feac1bd72649e3a6d4e2622615e4004e_JaffaCakes118
-
Size
58KB
-
MD5
feac1bd72649e3a6d4e2622615e4004e
-
SHA1
eb6e0d22d928fe92bacba72e45b1f2bcd9f18f73
-
SHA256
16e5ec0a6e4d3cc9a8fa4c0f82afbee496ddd3b1b7fc2099990692f22fd4de92
-
SHA512
182a8d3a9c9380f761b11cfd906515197346865353cab581789ab661173e4cd7c3e8bd4c12e93632680f5c87ca0ff93299350959a75d845370682a9e79014b2b
-
SSDEEP
1536:B9BJBTwTcP6z5zgmDE0GkLx/kG82tLMNMXSt:zB3TwTcPWUkLhkD2tA5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feac1bd72649e3a6d4e2622615e4004e_JaffaCakes118
Files
-
feac1bd72649e3a6d4e2622615e4004e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
rbdz Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rbdz Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rbdz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rbdz Size: 256B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE