Static task
static1
Behavioral task
behavioral1
Sample
dd67fd3357b0f253ac609ce64623e06b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd67fd3357b0f253ac609ce64623e06b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd67fd3357b0f253ac609ce64623e06b_JaffaCakes118
-
Size
9KB
-
MD5
dd67fd3357b0f253ac609ce64623e06b
-
SHA1
3806eff9f31bb6a958a5e4f641b7fb4b0f24a866
-
SHA256
f4170039d5619f9319b8bde95366f3d814572a5153dc4809ab6e2ac28fdcbd79
-
SHA512
7c3a316e494b753c8ee3f20e9cd302ca478ee87d34ac5d509403ffcce015b6c0f85f14143b820cef74d7bfdcf49d0b0ac386611a69e73170952cb0e3969495fa
-
SSDEEP
192:1RdbR9ApLPDdNvbI7keU5OIOR7lMygsXJit9qYgAyh+cijKLKpL2:FzAp/M7kdONldXcijVqL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd67fd3357b0f253ac609ce64623e06b_JaffaCakes118
Files
-
dd67fd3357b0f253ac609ce64623e06b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCryptor Size: 22B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ