Static task
static1
Behavioral task
behavioral1
Sample
dd43dc60060e9d9233027c48f24c365c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd43dc60060e9d9233027c48f24c365c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd43dc60060e9d9233027c48f24c365c_JaffaCakes118
-
Size
98KB
-
MD5
dd43dc60060e9d9233027c48f24c365c
-
SHA1
6a440b5c585d8be441d3e8dddb92614004841f46
-
SHA256
64e81090b0c7f3a7f71b46e381e42423c39e9c26c55853d90721cad845cdce76
-
SHA512
0502b55fd5e3e189b582ca21a8f957d0540ce1ab8e318dc236e9647748b2b65ae898e0cb5337d1664e6b46c1e71b216d3ca5742edbf6a2d303bd9af719163f27
-
SSDEEP
3072:MxCqMphFOprYrmIt1++U49TLkuYaOkL2Dmt:dJOpUSk1t9LYaOktt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd43dc60060e9d9233027c48f24c365c_JaffaCakes118
Files
-
dd43dc60060e9d9233027c48f24c365c_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Sections
*text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.�data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.da�a Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 498B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rloc Size: 256B - Virtual size: 2KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ