Static task
static1
Behavioral task
behavioral1
Sample
febf1140dbe3bcb9818836484a94b241_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
febf1140dbe3bcb9818836484a94b241_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
febf1140dbe3bcb9818836484a94b241_JaffaCakes118
-
Size
2KB
-
MD5
febf1140dbe3bcb9818836484a94b241
-
SHA1
c719763216a02f5b7f7d260a91d7a222a0fe94ae
-
SHA256
adbf0983459b9b7442b3184ea720b0e886b1d73c520d44ac8a1a67996c2bb76d
-
SHA512
beab13e7b5bb45b52e53d61ba434fbd0f184064726d5a92fd0665e805ec2e61c4a41459a5e23c78e506a4354d16fd3895a5a0ed65d44a613dd25ac9c27f67da4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource febf1140dbe3bcb9818836484a94b241_JaffaCakes118
Files
-
febf1140dbe3bcb9818836484a94b241_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 246KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 412KB - Virtual size: 422KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ