Static task
static1
Behavioral task
behavioral1
Sample
dcd33ca33b021761f19f9debc6e7b991_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dcd33ca33b021761f19f9debc6e7b991_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
dcd33ca33b021761f19f9debc6e7b991_JaffaCakes118
-
Size
13KB
-
MD5
dcd33ca33b021761f19f9debc6e7b991
-
SHA1
35dc137df3a00b5a775e5cee1053705e230e4e71
-
SHA256
0e62bcd37e48b3182b5cc68e03893c17d4c9447feed1bbbbfc9eaa523b499df3
-
SHA512
1dc361fe803c9dc143c919138f462bbdf7bb76ede3beaada87da708b780d370f2cdf9c00be902c8e24292cac587a3dab84a112f8bd9317ca4f773d588c18925a
-
SSDEEP
192:nnE/WdUNj13N7YtydV0pS4Sn4xHsgq8AuxrvZkCj3op1:nE/WdcB3CtydV0p9zbA4rvSk3ob
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcd33ca33b021761f19f9debc6e7b991_JaffaCakes118
Files
-
dcd33ca33b021761f19f9debc6e7b991_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ