Static task
static1
Behavioral task
behavioral1
Sample
dd3675f769e9c06295de824c69864ae9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd3675f769e9c06295de824c69864ae9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd3675f769e9c06295de824c69864ae9_JaffaCakes118
-
Size
269KB
-
MD5
dd3675f769e9c06295de824c69864ae9
-
SHA1
039b30cd2507e88d9974e5c55217ce7cb59876f1
-
SHA256
6539d71d7f0a8cdde0a0a55d9220cf99a6a26555a8390fac7341b3d1d2220c78
-
SHA512
318d5e98e07c8b6f9986fa113ca0bf912a3911abf63bae7902ffc9af74c2b35778f2f417f41d6b0290bb1ee9acb46c881632d8fcd05b432d0aa91d7bf83c8ca0
-
SSDEEP
6144:22dcufBBJIcP8PcD+IT+CWAovvpnnEtIyDal6:F35BJcFIKCW7R8IyDal6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd3675f769e9c06295de824c69864ae9_JaffaCakes118
Files
-
dd3675f769e9c06295de824c69864ae9_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.naked1 Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.naked2 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ