Static task
static1
Behavioral task
behavioral1
Sample
feb009b9a96729066ee768e110228c63_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
feb009b9a96729066ee768e110228c63_JaffaCakes118
-
Size
125KB
-
MD5
feb009b9a96729066ee768e110228c63
-
SHA1
1f4cb06242824e501c055609e6af50814f78bd0c
-
SHA256
2bba6e5c8bfb966c5dfe3b01875c54f7275d08c25a8da7921232b9e233359b31
-
SHA512
dd0fe15a35f0c4b12dc59089e87aadcc873141a8198551821120fac297eab7f6df4ad8efba0bb6d9faf44cd4b749744010ed5117143c7d1813376533a2de3750
-
SSDEEP
3072:sqpBZPr8Gyy48iWvCzocBUw2fog763p7ewd1fbzWArB7q:3CGyy4KCzoYFqWZd1Ddq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feb009b9a96729066ee768e110228c63_JaffaCakes118
Files
-
feb009b9a96729066ee768e110228c63_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
l5yn Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pdexlza Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nbkoyl Size: 4KB - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE