Static task
static1
Behavioral task
behavioral1
Sample
dd4df7b410a6bfd20d8d124bf8822d34_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd4df7b410a6bfd20d8d124bf8822d34_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd4df7b410a6bfd20d8d124bf8822d34_JaffaCakes118
-
Size
673KB
-
MD5
dd4df7b410a6bfd20d8d124bf8822d34
-
SHA1
80daf406ee88e0f3581fc133d2d6061e42e3bdd0
-
SHA256
5f5433ca0f79e7ce3d04a1f01e522ea5bd5a9935e2c654abde8550bc55fcca78
-
SHA512
b224b7967daaae7270ee452a70a6f529e42f2a88e4c095570ebb3ea4bef5d1b3dc12264f7400309320b6ec027273609f1372ab40733281a34f6121427c98eb49
-
SSDEEP
12288:5V8WNNDR3PouGLxe0Df4/mW+4rhPlMKLnQATbB56atKAbC7NyaWI9f:D8WfDR3Popx7DpIPHnzVVspNWc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd4df7b410a6bfd20d8d124bf8822d34_JaffaCakes118
Files
-
dd4df7b410a6bfd20d8d124bf8822d34_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
WB5T0SMs Size: - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
omH77Rh2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
qiFqgm2m Size: 659KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iNoXBjms Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eGkYTWs7 Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FbuwoLC6 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Yqvor6ne Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ