Static task
static1
Behavioral task
behavioral1
Sample
dd372e941d1ca28cb143a351644f3352_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd372e941d1ca28cb143a351644f3352_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd372e941d1ca28cb143a351644f3352_JaffaCakes118
-
Size
565KB
-
MD5
dd372e941d1ca28cb143a351644f3352
-
SHA1
c3a70c59b30fed0180d9b2d933fda3f806cc0ba1
-
SHA256
0b87e8bd9c72bb53f4e73ab2ad3d229dad30726e70f3bef21124254eb9b3fc94
-
SHA512
e20ef6cf0f57d161f1491bbd486b671000dd9d0e3dbd7726c42d8cbffdac4e7784fc45d8be1d3c459a9768bc83d1ac5f37b5c4e92ca1eb6d594ba0d7a23f698e
-
SSDEEP
6144:UZfec9EbXDk6RkdKME2EJuHOME2EBuHOLE2EJuHOME2EK:UZWtI6RkEwODIOGwODK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd372e941d1ca28cb143a351644f3352_JaffaCakes118
Files
-
dd372e941d1ca28cb143a351644f3352_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ