Static task
static1
Behavioral task
behavioral1
Sample
0797016dfc28d81e106cf2f406c0f809_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0797016dfc28d81e106cf2f406c0f809_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0797016dfc28d81e106cf2f406c0f809_JaffaCakes118
-
Size
854KB
-
MD5
0797016dfc28d81e106cf2f406c0f809
-
SHA1
6aac2f66c33348bdf424f2c8b52eef6ebe44c9b4
-
SHA256
2e7f08c4e8f3495a75e33675d111395bf32af94ee5db7e665cf3527412ccda57
-
SHA512
0249d7c41064d1b5ea7bcc7a132479bbe83648b73ad4aae13a2b2d328231edc245ee8c613e622987da7b22ca25453062d8c2bfa14975b14628c9ef21cb1afe15
-
SSDEEP
12288:AN7/J4am1DyNkErUHC7H9UWk0h4FItrcGqPVSi0m2o+F3Z4mxxr3vUWFZE0bWGIf:E/GEwM9nhecR20m2hQmXr3sWyrf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0797016dfc28d81e106cf2f406c0f809_JaffaCakes118
Files
-
0797016dfc28d81e106cf2f406c0f809_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 538KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE