Static task
static1
Behavioral task
behavioral1
Sample
dd64ccb5a70ae6d7531df034e0d14d95_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd64ccb5a70ae6d7531df034e0d14d95_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd64ccb5a70ae6d7531df034e0d14d95_JaffaCakes118
-
Size
280KB
-
MD5
dd64ccb5a70ae6d7531df034e0d14d95
-
SHA1
4e8a0b7971a93463e8fbf03d4a07f34208592d7b
-
SHA256
2cabdf82d129cd679f8b6d35b198949aa8c682debe930b95567e842e84aa80ef
-
SHA512
aeace5a496059f655f7552dad1140773f73f5ba58a9e92364abd0aadcb0581ecdc081cd215d68808507dd4cb8056915d471bf9e710e82b69e77139cb65db2fc1
-
SSDEEP
6144:R2gAb5sW8TVdTxxUjWcAYHSeWKBlTPSQR1Rmk/HasTPtr1fY4U/:Rf45Z0txxiWcsef1t/H5TY1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd64ccb5a70ae6d7531df034e0d14d95_JaffaCakes118
Files
-
dd64ccb5a70ae6d7531df034e0d14d95_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 220KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE