Static task
static1
Behavioral task
behavioral1
Sample
0797657a36aeb9dc043693ff8490c347_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0797657a36aeb9dc043693ff8490c347_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0797657a36aeb9dc043693ff8490c347_JaffaCakes118
-
Size
689KB
-
MD5
0797657a36aeb9dc043693ff8490c347
-
SHA1
0590fddf196936ef91ce075f9718a5aff7508100
-
SHA256
fcb5008f67ab8a20a6cc8d52ff4ad0970f58dea7f55593c5f6fdf84c5f24c392
-
SHA512
8708ace68af45779fe14bb2353ff2ebfa3d81cde81bcb511568582f82ecbd51b1f39d7ca461eaef9078169696c2205145418b9a9d026f96dfcfaf16eb9a5e63a
-
SSDEEP
12288:l+dHtesIZB0p/7lYywJvaScgX+9Q3ZibVUZ/KF3Z4mxxli2cT0H5PUiRuLTwo:odHQrkpBYy2OnW38bVOCQmXlBBZPUisJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0797657a36aeb9dc043693ff8490c347_JaffaCakes118
Files
-
0797657a36aeb9dc043693ff8490c347_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 373KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE