Static task
static1
Behavioral task
behavioral1
Sample
dd5cb7a9d0883d9413011e988ea484f5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dd5cb7a9d0883d9413011e988ea484f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd5cb7a9d0883d9413011e988ea484f5_JaffaCakes118
-
Size
184KB
-
MD5
dd5cb7a9d0883d9413011e988ea484f5
-
SHA1
5b2f2f40fe61a455e34fc40cfadbc263665b179a
-
SHA256
1c70e0e17c3bb5963174ea21754bfa5a109d89542aba374b7c0aa111785a6484
-
SHA512
2cacde5ce5aca84aeac26c737a67fd9fa0f5a740217ae0beb87064a61b06a6971ac500e55409c4ddeb7bb5411721e4d697196d11fc259aa96d05f21c715357d9
-
SSDEEP
3072:i22jGP0kMEJHseLbbrGfYFQ9X4qsHRa9IEhDTg668XhzxgobjSKi62jpAfEKbsr4:iDmHsabbrhF8IqsHYc6xXhxrbGDdju9R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd5cb7a9d0883d9413011e988ea484f5_JaffaCakes118
Files
-
dd5cb7a9d0883d9413011e988ea484f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 282KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE