Static task
static1
Behavioral task
behavioral1
Sample
febfe73c01b8258a2c9885d6dfed5e1d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
febfe73c01b8258a2c9885d6dfed5e1d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
febfe73c01b8258a2c9885d6dfed5e1d_JaffaCakes118
-
Size
164KB
-
MD5
febfe73c01b8258a2c9885d6dfed5e1d
-
SHA1
76ea19b4b3d15c2914ab90740ddaa026023b6364
-
SHA256
7d327d237e0eea541a774a73f70fc75d443b09a43fb20455b8e9be3e2a056e80
-
SHA512
0ac485ddfe6c842fea7f4bb3a2defd363e3e6a919fa23134879d2ddcc2eebb9c597d15d24e2f5841e3594b8b06d2b7063c388b526f5f45903733f9571ee1043f
-
SSDEEP
3072:0vo+Fm5K8BHafgZhLRB+IW3OU/OWpKbCL7TliVIyiLepRnsj7/kq:0lFaagPweU/OWSCTlU9i73
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource febfe73c01b8258a2c9885d6dfed5e1d_JaffaCakes118
Files
-
febfe73c01b8258a2c9885d6dfed5e1d_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
mainyi0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mainyi1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mainyi2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mainyi3 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mainyi4 Size: 162KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mainyi5 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pe2 Size: 88B - Virtual size: 88B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ