Static task
static1
Behavioral task
behavioral1
Sample
690dc561b8162e7fef3503b4855f900a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
690dc561b8162e7fef3503b4855f900a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
690dc561b8162e7fef3503b4855f900a_JaffaCakes118
-
Size
377KB
-
MD5
690dc561b8162e7fef3503b4855f900a
-
SHA1
f28cf3d35901d66356226fc3a11a1c1faa233dd7
-
SHA256
093e0858b353d4049c2dc9287acab33a4b26f09be35e73b0f7a3e7324e639227
-
SHA512
fd9e420c3d111d39f62407dc2f36c62e72449f113dfe6fe7e47a1741de330fba03245a438f70aa68b2c014e0c21fdb59f6b4c950ccbb95d8dd4b6e5af2aaccce
-
SSDEEP
6144:TCmgZyg51BHVP49dtIG4ZIouXFcqcvdS1jdegAFrKksqnSa+MxYwwVXc+IDLaZhV:TyZygxuntI1ZvuXa10tuWaYw2IDChOZ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 690dc561b8162e7fef3503b4855f900a_JaffaCakes118
Files
-
690dc561b8162e7fef3503b4855f900a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_MEM_EXECUTE