Static task
static1
Behavioral task
behavioral1
Sample
dd6a32e1541ec9c117580dc9a30e87cc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd6a32e1541ec9c117580dc9a30e87cc_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
dd6a32e1541ec9c117580dc9a30e87cc_JaffaCakes118
-
Size
162KB
-
MD5
dd6a32e1541ec9c117580dc9a30e87cc
-
SHA1
83fbe439017ec3da3e07bcdb75fad133caa2803c
-
SHA256
749a2663c6c4b18897f5bb7c6ccc7d4639a56d881cd0176d0fa57495c30a1dae
-
SHA512
c0e3571ae581df5838744e79cba70929c974e11f89b80a4b84e019a41dee03a781a7594b27c8ac9f90ed7743d9b64a0b4f55728fe6f6dcb77748f12bbb77c140
-
SSDEEP
3072:P3Uvq7FBNKIgRr3gaHBnOCQ7fC3OSuUaVupiuNAX:P3U2NakaHBnOJ65u5MlK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd6a32e1541ec9c117580dc9a30e87cc_JaffaCakes118
Files
-
dd6a32e1541ec9c117580dc9a30e87cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 153KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE