Static task
static1
Behavioral task
behavioral1
Sample
dd0f80f096d5a1696cb4d930c62a1db0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dd0f80f096d5a1696cb4d930c62a1db0_JaffaCakes118
-
Size
408KB
-
MD5
dd0f80f096d5a1696cb4d930c62a1db0
-
SHA1
1b756ade4e96df6629d90896d67a3d3c9c7731ea
-
SHA256
35261756a6c9fc25cbf6d8b2e1891d7295cfbabaab2773324f3c240cb7d34705
-
SHA512
92cbedff6b59ec7d52e52be554a5b07d0af3cc73b2e762daa6b9a5cd7d858fbea78d14485368a202a6df941ab5fa1a47124b1f9533054bb56e5a8033c56699a3
-
SSDEEP
6144:fu4J23saGoVJ91WvS+ut832nlAmW3wyf0vBiIER1Z3WsFco9JYa1vn3Ua+BjbUrc:fQsiVr1AS+uwEBsFRWa9E5jYrc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd0f80f096d5a1696cb4d930c62a1db0_JaffaCakes118
Files
-
dd0f80f096d5a1696cb4d930c62a1db0_JaffaCakes118.exe windows:4 windows x86 arch:x86
541b27a206b8db01f0ed492f975825ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
DefWindowProcA
Sections
.MPRESS1 Size: 404KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE