Static task
static1
Behavioral task
behavioral1
Sample
fefecb4d9125002f2491ee5a7b6a4fd1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fefecb4d9125002f2491ee5a7b6a4fd1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fefecb4d9125002f2491ee5a7b6a4fd1_JaffaCakes118
-
Size
81KB
-
MD5
fefecb4d9125002f2491ee5a7b6a4fd1
-
SHA1
bbf48085e235845ecff21298d2da611d724a080c
-
SHA256
17cdf7cfa2a082530943dea7c83edbaee96116d73a15352019a96a6acb489b30
-
SHA512
70044b3f6d60631f0c5cf7e0e483f4b3c2c8a647e58021bd6b4c535dc95d1156ad0756a3fd04798b8b805ddf40380d81263f50c808622978c236ea6670d4b24d
-
SSDEEP
1536:Z9r6AT70tMM5PLLOFLapjAM6rQKNEyb/mllVB51G+NVPNnpkT:QxOFOpjA/eIm3511lNpkT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fefecb4d9125002f2491ee5a7b6a4fd1_JaffaCakes118
Files
-
fefecb4d9125002f2491ee5a7b6a4fd1_JaffaCakes118.exe windows:4 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.naked1 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 115KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE