Static task
static1
Behavioral task
behavioral1
Sample
dd3269fd27f2ca5c288facae55715d08_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dd3269fd27f2ca5c288facae55715d08_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd3269fd27f2ca5c288facae55715d08_JaffaCakes118
-
Size
348KB
-
MD5
dd3269fd27f2ca5c288facae55715d08
-
SHA1
0cdf08c69213a7dac9db13256028aa7d73e20391
-
SHA256
27f9e8a6274376405f8692416f6f9719b9c53d8dc980b5a2e9645598c2f720f1
-
SHA512
3bd843aedee37bd484f7dfeb6de3db3dd6b17b65ede365d0859de4c9c483b8878d9e7d7f595f30e4e2e9ff61eb6e91d0afd249e8d8683d685b378eb20c87e323
-
SSDEEP
6144:A6lW3eYIgVO8f37CGeinSzeP8VTVCCGymbX8JyjRH/svZk+3btQCnU:AvIgVO8DCBzeaRPGyWAyF6D3pa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd3269fd27f2ca5c288facae55715d08_JaffaCakes118
Files
-
dd3269fd27f2ca5c288facae55715d08_JaffaCakes118.exe windows:4 windows x86 arch:x86
8b53af7395cccfc07e9646fce6a478f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
GetSystemDirectoryA
GetLastError
GetModuleHandleA
VirtualProtectEx
GetTempPathA
GetProcAddress
advapi32
ConvertSidToStringSidA
DeleteAce
CopySid
avifil32
EditStreamSetNameA
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 240KB - Virtual size: 767KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ