Static task
static1
Behavioral task
behavioral1
Sample
dd578275be84ea32696f280bc782de87_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
dd578275be84ea32696f280bc782de87_JaffaCakes118
-
Size
104KB
-
MD5
dd578275be84ea32696f280bc782de87
-
SHA1
1d8f7f07609598bb95fd00ecc62d131180095343
-
SHA256
8a06a1550faa9117946cc0c13070fe8e51e3d45f4e84f19290fe9afd154bd046
-
SHA512
2e14ff8bf33de910528758526147128ededf5c624d95de854f2caf2bf4fe463dff99126b8ae74797c8c951e407ca2bfc61b6a57ad83d1554bda4966d36a01384
-
SSDEEP
3072:oVJK7X3mRpIldUWcF7A8UsrjRs+lCGIH+nXx7Q:oVc7IIldjcF7A4QGIH+nhc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd578275be84ea32696f280bc782de87_JaffaCakes118
Files
-
dd578275be84ea32696f280bc782de87_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 102KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE