Static task
static1
Behavioral task
behavioral1
Sample
dd242431f74dec7d42b95cf95f909b51_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dd242431f74dec7d42b95cf95f909b51_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
dd242431f74dec7d42b95cf95f909b51_JaffaCakes118
-
Size
192KB
-
MD5
dd242431f74dec7d42b95cf95f909b51
-
SHA1
4516a812cf58ddbd2414720a8583a45126b657bb
-
SHA256
2eba4b6bb350e1800b9ed41d39a5d3738c73152fdd44d7521f3ff9ac81c420d3
-
SHA512
809d59e312a98bc30b7e685e409b64b1213a0f8e7b7621ab4cb002fd9a1f38f563fbc05e933dff8d49bc807631309ddb57f3171f04cee609e9c0b9648703a84e
-
SSDEEP
3072:yph7oPVyk9wQwOjj7GlEjJOLhhg3MtefeDtYJzE/f5lHtpFl:ypBoveQw47WEjJhy0bw5lHtpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd242431f74dec7d42b95cf95f909b51_JaffaCakes118
Files
-
dd242431f74dec7d42b95cf95f909b51_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ