Static task
static1
Behavioral task
behavioral1
Sample
dd6290422f7dec38ab5227767d3e5696_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dd6290422f7dec38ab5227767d3e5696_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd6290422f7dec38ab5227767d3e5696_JaffaCakes118
-
Size
37KB
-
MD5
dd6290422f7dec38ab5227767d3e5696
-
SHA1
357386ecf57a286849a21773a6023b8b79d9da06
-
SHA256
14b7d015f0c5e46063164bd7a472029f934b0f3d6de81b63c2c92dff6ccab1b3
-
SHA512
05b0bd562b2aa65faa792339e8f61b634578624bfaf26e2d96f630031f0b08d06967e0667506702ddbdcabedcac37b6250ca1cf7e8f5d71b6389329e6fa95316
-
SSDEEP
768:FVzEq+aJe1mgawzxsUNCub8PC1jIHxATVGuQyqiS9TtIwLNVb7IpOJ:FR1+aJe1mgawzxsBub8PC1jIHxATVGDJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd6290422f7dec38ab5227767d3e5696_JaffaCakes118
Files
-
dd6290422f7dec38ab5227767d3e5696_JaffaCakes118.exe windows:1 windows x86 arch:x86
b8dd9610f7f3c4e817e66f3501bf26f1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
� Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�& Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE