Static task
static1
Behavioral task
behavioral1
Sample
dbdcdd4c53c1e4b9812cb94c12f36368_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dbdcdd4c53c1e4b9812cb94c12f36368_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dbdcdd4c53c1e4b9812cb94c12f36368_JaffaCakes118
-
Size
157KB
-
MD5
dbdcdd4c53c1e4b9812cb94c12f36368
-
SHA1
b08cd0d2b46d05651b23f66ab9a5b9046fb6b36e
-
SHA256
bd837f97e6a41b9b80a7e34a0625d73118fb8e447b78ba63fe9427be8392b7ee
-
SHA512
67bfd92e58bc7da9c684cbacc63f909a65c68489623ccf02966a920280978d11c47345e95e58c246fb7b95bb000f42c07b32c7b7ad2cb9789234774b3f3762b2
-
SSDEEP
3072:e/ROjNsLWvFtJRcj6CZR4Fs0UigLdsV4p8g7uIswfJUW:e5O5sLWxR3CZRWsJigLdPAPwBN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbdcdd4c53c1e4b9812cb94c12f36368_JaffaCakes118
Files
-
dbdcdd4c53c1e4b9812cb94c12f36368_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 49KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ