Static task
static1
Behavioral task
behavioral1
Sample
febde70cc68fb2937d98f923ce0e4d24_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
febde70cc68fb2937d98f923ce0e4d24_JaffaCakes118
-
Size
2.7MB
-
MD5
febde70cc68fb2937d98f923ce0e4d24
-
SHA1
4bd39a57d2d0583d0c36bf29304c02896ff84056
-
SHA256
0f144ec9d6d70976678f340b5dee05b4a148f400e4b9b1ad225a6035a32ac6fb
-
SHA512
24b1de6a98ec2609e18b41b9fb251d737af367e911d10884b60b79f2877759fb17d008dc1a8b15d0560ada4b0ffda5bc3dfdf7829e4bcb97382d0d9b13331c5c
-
SSDEEP
49152:BtWdh0G6dlkUvVp2Iw2J0mKBFzJ0nCCSbmPBmoNR3XbDCMjRe3Kwt0l:BtWdh0G6bkUvH25mOFd0CbbmPBmgRHb5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource febde70cc68fb2937d98f923ce0e4d24_JaffaCakes118
Files
-
febde70cc68fb2937d98f923ce0e4d24_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.1MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE