Static task
static1
Behavioral task
behavioral1
Sample
fec969dbe50bf7ca677817f3e85273bc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fec969dbe50bf7ca677817f3e85273bc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fec969dbe50bf7ca677817f3e85273bc_JaffaCakes118
-
Size
747KB
-
MD5
fec969dbe50bf7ca677817f3e85273bc
-
SHA1
fb2d5106526f0af0ca8926b5c36e9fc45c2cf37b
-
SHA256
75051819d27b7633673d48cabf7ce06ed85837b34746109a619ba5847f7a5d4a
-
SHA512
fbd4a4d275c6519e94f731cb9f8ef4af3f160506009c5b1915f462ff36a0b2f72ec0033be72e3a5e43971269446c95fda62ddb37e23d0170641f3a23b41acbcd
-
SSDEEP
12288:PMb09AEeHU0GHlQf74vK0msI2bE/HIKg+lVPoLMeZNE1lzxx0tBMjVyP6K:PM45e07m4vK0mebYoKJVoBHE1l0c86K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fec969dbe50bf7ca677817f3e85273bc_JaffaCakes118
Files
-
fec969dbe50bf7ca677817f3e85273bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 597B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ