Static task
static1
Behavioral task
behavioral1
Sample
00dd538e9f6834bcee531e0c59cf2c8d_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
00dd538e9f6834bcee531e0c59cf2c8d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
00dd538e9f6834bcee531e0c59cf2c8d_JaffaCakes118
-
Size
44KB
-
MD5
00dd538e9f6834bcee531e0c59cf2c8d
-
SHA1
c236d832ddeab4a6b48c276ccdba8f30002db6bb
-
SHA256
7093e9327b6fefebd1bdb8008032349e462f4ff64ffd17309bd5422c15ec8a13
-
SHA512
04191bc4de15beddedecb77ae511237264c1791e83fd5e82be3f0da16122207476c84c6263d20d436405dbb55d5a23f5df0fa3ab112acc5f95a65f21a5d73743
-
SSDEEP
768:akvx4it94jcsaeVrwkXUo2LAf9vtCxZYcVjph1JzZH2hdvyLv:aix4i8Y4VF2StCxrVVh1HWfvE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00dd538e9f6834bcee531e0c59cf2c8d_JaffaCakes118
Files
-
00dd538e9f6834bcee531e0c59cf2c8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packed Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE