Static task
static1
Behavioral task
behavioral1
Sample
dd0b23d048a7aee0eb0a8e81ca227401_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dd0b23d048a7aee0eb0a8e81ca227401_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd0b23d048a7aee0eb0a8e81ca227401_JaffaCakes118
-
Size
29KB
-
MD5
dd0b23d048a7aee0eb0a8e81ca227401
-
SHA1
cceb2fc57e8a496d6eaca4775cb2bda77a1f07ec
-
SHA256
786a4f50898d99824d8843156fd29a8ddbda66906d178d004db3f65142ca9037
-
SHA512
b4cfd0e9683ff18bb29ad2c4d4890202be2351a12592d03504c0185983e55182c8864ae0dc42a4b42ce7d947f6ed541a44f0f4252261246203031aa83da3031c
-
SSDEEP
768:N7pNn6cGCsvXry3JqOzRDW+EwwkMeRt6h:AvkVDRWkMeM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd0b23d048a7aee0eb0a8e81ca227401_JaffaCakes118
Files
-
dd0b23d048a7aee0eb0a8e81ca227401_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ