Static task
static1
Behavioral task
behavioral1
Sample
0990c7a65be32c27c00d03d82601c924_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0990c7a65be32c27c00d03d82601c924_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0990c7a65be32c27c00d03d82601c924_JaffaCakes118
-
Size
32KB
-
MD5
0990c7a65be32c27c00d03d82601c924
-
SHA1
9961743888e28b35c9065fe29862e0f084dddc54
-
SHA256
5b4fab0f77de1a5a25e2cf41f58ca05666f5296ef85a229e62c52de1c9fa3758
-
SHA512
f78678a56e9f0bf6b4d60c8fbd37029f454631c8b70e748adfe25e0ddbf3347539e900d0fbd2a04c2f46d081dca8f7fc510cfdea69c6abbb351324136ee301b5
-
SSDEEP
768:QeDJYfTIuoqQi3vVqV9vkxkrfo5/+uOPsoN+P1KcN:QtXoqQmqXkO+3igB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0990c7a65be32c27c00d03d82601c924_JaffaCakes118
Files
-
0990c7a65be32c27c00d03d82601c924_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 662KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.6MB - Virtual size: 19.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ