Static task
static1
Behavioral task
behavioral1
Sample
dd2e6d0936d7a161a1748e871dc01b4a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd2e6d0936d7a161a1748e871dc01b4a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd2e6d0936d7a161a1748e871dc01b4a_JaffaCakes118
-
Size
687KB
-
MD5
dd2e6d0936d7a161a1748e871dc01b4a
-
SHA1
57e5e666dc3ae2381fc470e31b2fe3235a9c9858
-
SHA256
868754ea5b225da4a745e82b6b1ce22a26f9aa7aa434b6ab17efb16e03a72ff3
-
SHA512
5f86d4e95574102707d928a864d7c188cb41a6045360ebda017cb90f3764153331e120388d84c4282e803d50b515c2d29ceb2367af902f99c0db938fde583d02
-
SSDEEP
12288:Oq/CsG7wSSkmJ4z4+B2qbMuWwAGIPR452vbSOc4mVawF3Z4mxxz0MHoTAFbgf:B/Cl7oJ4zXRbTrAu5wvc9VQmXzKh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd2e6d0936d7a161a1748e871dc01b4a_JaffaCakes118
Files
-
dd2e6d0936d7a161a1748e871dc01b4a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 362KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ffff Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE