Static task
static1
Behavioral task
behavioral1
Sample
feb775337ebbb8db70b542af6e1db433_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
feb775337ebbb8db70b542af6e1db433_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
feb775337ebbb8db70b542af6e1db433_JaffaCakes118
-
Size
900KB
-
MD5
feb775337ebbb8db70b542af6e1db433
-
SHA1
1d962e48fae1c779868316509e84dc1c6f01225e
-
SHA256
0e6f6d7f21f12a977ec85dda8eb63fdd4b119398f1b7e100d9f5c4daf932b0dd
-
SHA512
194a648061b819082436ffff1c3ac77966fe43fed70eeebdf748c740a96a1b3136ec4a143467ffd7ca3b5404095d035a90b1e197a51a10fb3c677489e3724f69
-
SSDEEP
24576:00wwuFQZfpcYRz3J/Ae1a8LvN2c8WZVQAq8q:JwwiOBFjd25SVQAq8q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feb775337ebbb8db70b542af6e1db433_JaffaCakes118
Files
-
feb775337ebbb8db70b542af6e1db433_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 52KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.USER32 Size: 564KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE