Static task
static1
Behavioral task
behavioral1
Sample
00dd378e308395f3fe320163dc0839f0_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
00dd378e308395f3fe320163dc0839f0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
00dd378e308395f3fe320163dc0839f0_JaffaCakes118
-
Size
641KB
-
MD5
00dd378e308395f3fe320163dc0839f0
-
SHA1
bda8e7a059844a04e81d59260cd54502b86ff9b5
-
SHA256
674679cb6b32038cea8e28fcbc8111bfe62f7a89274f432db81d7ce9865249bf
-
SHA512
de8d162597f1646657077d0d8583bd9c87baee22c7b46840ad38163fcc5b1fd6684a4e7e77d839815fa2d1ba2d47f52d2af4d7b9c5d54ee28044c17eda9ab67c
-
SSDEEP
12288:XHFnLDiJBKKKgROQaFbXq9unuv/328y1c2obY70D1Med2FWZ:liri5FGEnuv/3SocID1MedKWZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00dd378e308395f3fe320163dc0839f0_JaffaCakes118
Files
-
00dd378e308395f3fe320163dc0839f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 776KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 376KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE