Static task
static1
Behavioral task
behavioral1
Sample
dd312e38d3f2254931c2c0f6881287e4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dd312e38d3f2254931c2c0f6881287e4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd312e38d3f2254931c2c0f6881287e4_JaffaCakes118
-
Size
126KB
-
MD5
dd312e38d3f2254931c2c0f6881287e4
-
SHA1
d00c5501a4eaacbdaf13f76f1627c5809cabe98c
-
SHA256
333ee12ed3f76f29874d48226e28d178ccf5bb1808bfc8979c641630e675d2be
-
SHA512
116a1fa22ce3327c31008e83e3b28cff3f986dd774683b77a6e6e01a044c6d2a52f050b887dd0b2dd982b80eb02a93c06bd1339339b276c9bb76bc59d5d7167f
-
SSDEEP
3072:SFcZ43ZDHS8K/zbR1ANL8Md/k2WWhPg3LL/gMIH8:PgHS7rboN4Mqag7LoMIH8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd312e38d3f2254931c2c0f6881287e4_JaffaCakes118
Files
-
dd312e38d3f2254931c2c0f6881287e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1003B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE