Static task
static1
Behavioral task
behavioral1
Sample
dd37c12392519dd5af809b3590cbf2a4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd37c12392519dd5af809b3590cbf2a4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd37c12392519dd5af809b3590cbf2a4_JaffaCakes118
-
Size
284KB
-
MD5
dd37c12392519dd5af809b3590cbf2a4
-
SHA1
64c65b3bb522881ac79355b5899cd8fedd45794d
-
SHA256
2d1452dcabca2290fcc55e4653d4ff5574a9bec95fe62d5c50345891a3f78197
-
SHA512
d0ffdaad041390e65da778691d07af45fd142c7319fec8953d42a8b44e3388ae3e463c91043a3dd571c6e77b835f0c41e843b125bf55caee3595ba75feb1652d
-
SSDEEP
6144:W8b9+AEsVEfod0tE14nDWgRAkP52GQn8xID0DMFWMDtgZA4UZ5kAMEx4Q:rb8AErdzR3P52GLxe0D/Mp4UZ5QG4Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd37c12392519dd5af809b3590cbf2a4_JaffaCakes118
Files
-
dd37c12392519dd5af809b3590cbf2a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ssbsb Size: - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 263KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 167B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ