Static task
static1
Behavioral task
behavioral1
Sample
dd636ddea549129fb43c684ee54f33b7_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dd636ddea549129fb43c684ee54f33b7_JaffaCakes118
-
Size
443KB
-
MD5
dd636ddea549129fb43c684ee54f33b7
-
SHA1
532b2095254955e87d7da86bff20b9c39fe4bd2e
-
SHA256
aa12e1b10056d0d12d3c41a402d512de120c6cb64ba352f2adaee8ed3f6675a4
-
SHA512
77ceb494d899221ebf56ae43cec97a89ae8d6951fd7802b5474eddbf14013bcd9a1732a1b2df246c066cb7eed93b60bd6e714d230ef456f1b72cd57af1568c99
-
SSDEEP
12288:Jtby56TP04cJ85qxc581KP77JgAUVQNLW4j58lKLqvz6hdvVv:J3oGH40gAUVArFqRz69v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd636ddea549129fb43c684ee54f33b7_JaffaCakes118
Files
-
dd636ddea549129fb43c684ee54f33b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 35KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
asdc Size: 403KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE