Static task
static1
Behavioral task
behavioral1
Sample
dd44811585d558ca5fcd4567141eb761_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd44811585d558ca5fcd4567141eb761_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd44811585d558ca5fcd4567141eb761_JaffaCakes118
-
Size
689KB
-
MD5
dd44811585d558ca5fcd4567141eb761
-
SHA1
31fa931c65bbcfe81ce8f0b6db98cc0e5625b94d
-
SHA256
98255983b9be5b047593adee12c5ba63767764ab8cd26d88ed6705b0f2a777d8
-
SHA512
2f756f3135e4b234d16741112345f11ee541b35aa85b45650ff35dc27c8ee917ac4a70b69702e5114c36b1c4a31cd61f75a5bf4267c8701659a1219345c13f83
-
SSDEEP
12288:OHsH10zvHIigOT/XjBvVfKN99zzs8F3Z4mxxEDqVTVOCl:AsHKzPIigODXjBvw79zzs8QmXzVTzl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd44811585d558ca5fcd4567141eb761_JaffaCakes118
Files
-
dd44811585d558ca5fcd4567141eb761_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 373KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE