Static task
static1
Behavioral task
behavioral1
Sample
dd5320b059e83ca8b9cd29eea7413183_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd5320b059e83ca8b9cd29eea7413183_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd5320b059e83ca8b9cd29eea7413183_JaffaCakes118
-
Size
686KB
-
MD5
dd5320b059e83ca8b9cd29eea7413183
-
SHA1
c776426c4074bde10e443f4f8f15b6369263cc0a
-
SHA256
72c1f3c0619c0eba03d7dc02504d1b127a9758c32ea10b17818fdebd0d466925
-
SHA512
5bda10471af1751e32d612d033183be1038670be9dfef37a53c8d0346ff1a55c8205ca13853e0dc9b47d013525639b8af511354c0ad41b046f0e0c59fa32d7e9
-
SSDEEP
12288:Sm2Ox1bD/oR3PJ/GLxe0DWFwySzAsWJ9pkOD/FnvQ9OScbZONzTKiFjkwV:SmrIR3PJYx7DWFwsJ7DBQ9wZY39Fjka
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd5320b059e83ca8b9cd29eea7413183_JaffaCakes118
Files
-
dd5320b059e83ca8b9cd29eea7413183_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
2re3FwhF Size: - Virtual size: 778KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hvFY1pmp Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
itS3ifV5 Size: 670KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ijMc7z4b Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nOpLNwTo Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
L9BwbC69 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
naePzX7m Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ