Static task
static1
Behavioral task
behavioral1
Sample
dd63d527ff34c607ccec8eadc29cfb3f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dd63d527ff34c607ccec8eadc29cfb3f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd63d527ff34c607ccec8eadc29cfb3f_JaffaCakes118
-
Size
303KB
-
MD5
dd63d527ff34c607ccec8eadc29cfb3f
-
SHA1
9017d3de4b2d8f20fe76bb66616fdd3a3a9bb03e
-
SHA256
e8d33888276269e4023ed56c5443319d5169d82e71766f46406a3fa5c061bf40
-
SHA512
0133686e30cc40effbefd9e416d4038cdf01e27e0b3f0a45c29abba783a33bff521182723befebc7992dc4641954c4535da3c8914236a25c564e2c4f14620b84
-
SSDEEP
6144:HAxoMCtcCPhGTjq0KR+OvBkDMAectra4ldaznkeCXBQj4qiH//8Q0boS:sdCtm/cZ4Oc13lYYXBq3inSoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd63d527ff34c607ccec8eadc29cfb3f_JaffaCakes118
Files
-
dd63d527ff34c607ccec8eadc29cfb3f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 284KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 296KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE