Static task
static1
Behavioral task
behavioral1
Sample
dd5d14ea00363f4081eb76082a6b3b27_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd5d14ea00363f4081eb76082a6b3b27_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd5d14ea00363f4081eb76082a6b3b27_JaffaCakes118
-
Size
49KB
-
MD5
dd5d14ea00363f4081eb76082a6b3b27
-
SHA1
a5273c8f8aff603f7ac2d4505ffd855a2da34fdf
-
SHA256
7a290a9f8ada81c268efdf60703ee68f6063746a0f42608315f85fc63b6299dc
-
SHA512
fb1f52855bfeee87e389efe652f760241283c9e56e516467c9d41c077c1ce097846a25fb287ab8651b3801ad969ea3abf861b380cab8fb8b955b4f0fb9ec3906
-
SSDEEP
768:7SVR9nYveztNukxx8GdGzCGXMD44PXPA7bqxPEi2/pU++Aus76ewhnuMYw:7SZYOtZDjgTm/aqxMDyU6ewb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd5d14ea00363f4081eb76082a6b3b27_JaffaCakes118
Files
-
dd5d14ea00363f4081eb76082a6b3b27_JaffaCakes118.exe windows:1 windows x86 arch:x86
ae2feacf581a127ec8c21fcc379a58ea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
user32
MessageBoxA
crtdll
_getch
_iob
_itoa
__GetMainArgs
_strnicmp
abort
exit
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strncmp
strtol
wcslen
wctomb
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 608B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88B - Virtual size: 88B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 808B - Virtual size: 808B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE