Static task
static1
Behavioral task
behavioral1
Sample
dd6c249cbeecd5616a73720c2b0af077_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd6c249cbeecd5616a73720c2b0af077_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd6c249cbeecd5616a73720c2b0af077_JaffaCakes118
-
Size
91KB
-
MD5
dd6c249cbeecd5616a73720c2b0af077
-
SHA1
1dec41804ad877f54f33cd18e62db0ee7ed87b32
-
SHA256
23999983316af4241a31cbb5177e704956d614e727f25b5a4e2fdb3db1eae238
-
SHA512
13f44196a3beb7f2216ac3d398af3d396ff6e1efb8bbcf57fd9955499cc76b8ee54967125093f68cc35ccfc2fbfaade6ff6b8bcb624e102e402fb9c47f46a280
-
SSDEEP
1536:64j+9T+9cdaxHH1N8UfxpB03QJznWRlTi7Ek4JrYXIwn9UYVu73VsVSUiWT6:64j+9T+9cdaNHgM/QRlME5n37lsbiWm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd6c249cbeecd5616a73720c2b0af077_JaffaCakes118
Files
-
dd6c249cbeecd5616a73720c2b0af077_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 224KB - Virtual size: 223KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ