Static task
static1
Behavioral task
behavioral1
Sample
c90e908b7191e43ec7c84a413993d73c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c90e908b7191e43ec7c84a413993d73c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c90e908b7191e43ec7c84a413993d73c_JaffaCakes118
-
Size
230KB
-
MD5
c90e908b7191e43ec7c84a413993d73c
-
SHA1
3b3b25b1c955938dcaefc41af014d4315c52907d
-
SHA256
85a24caeab9b2d874f34fe0a92de9675e37d6efeb74a79c192ce5dbb5977ae1f
-
SHA512
9fdddeecb9622119e007db099377e410729303bff4a8f7aaf3fd40f4ac84bf80d4373e669d37eadbda2f42372a6aeaf10c316c4051d6b3fccca1c583a5e2cc8e
-
SSDEEP
6144:1OfqHrmH0uKc3cWayTd9vTx/v77Pq2f09qRy1sjG9z/aV1zq+:1EqL9cRvTXrx/v7zqKocG9z/gzq+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c90e908b7191e43ec7c84a413993d73c_JaffaCakes118
Files
-
c90e908b7191e43ec7c84a413993d73c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 269B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 662B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.r1loc Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ