Static task
static1
Behavioral task
behavioral1
Sample
dd690dd7b897ad4240ae5b634f206d19_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd690dd7b897ad4240ae5b634f206d19_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd690dd7b897ad4240ae5b634f206d19_JaffaCakes118
-
Size
111KB
-
MD5
dd690dd7b897ad4240ae5b634f206d19
-
SHA1
27a23323703edef505a7660dbcacc37e2ec16d82
-
SHA256
7bdda747ca418da87da9428d67e1b2b5d9a6459e716611123f000821f8b06d34
-
SHA512
d82a24a1395da6509d8d966ff424cb837fb5d5c670b1a95567d8f254b8710ca120e573f60d92f62584d17de88196f41aaf061060af2c4705ec2d54481d935ce6
-
SSDEEP
3072:16z3sa4IX2WasqmqsPCVZ6oEqwnzXU5TWPAIQf6UNypSPBqeMFIb:16z3sa4fWjqmIVQjqwnzSSkfFNyp8v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd690dd7b897ad4240ae5b634f206d19_JaffaCakes118
Files
-
dd690dd7b897ad4240ae5b634f206d19_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 269B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 818B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reaoc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ