Static task
static1
Behavioral task
behavioral1
Sample
dd7b7d17b0616ddb29b2b163e864af2d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dd7b7d17b0616ddb29b2b163e864af2d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd7b7d17b0616ddb29b2b163e864af2d_JaffaCakes118
-
Size
32KB
-
MD5
dd7b7d17b0616ddb29b2b163e864af2d
-
SHA1
e1d1e67ca7c1f8c420cef8e6fe40df9fa91346dc
-
SHA256
6d1a745ff3fe4fe2f7e3571f3dcfcb36ecd4a98d904728acc8ac38023cd4fbd7
-
SHA512
a023906824983f9c127a10f73113ceb769f3ea02f919835e3e71fdd0c9b08558fa193fb07e7a607910fb2d0850857a82dd62b0a08999f7fcdbf919f77763cc37
-
SSDEEP
384:L0pQBNEKtsdcF9AZJISAjm2sTQQc4cvJIV5ZOdTeNXFz:cSNEKi6DA47PsTqz2dkTcz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd7b7d17b0616ddb29b2b163e864af2d_JaffaCakes118
Files
-
dd7b7d17b0616ddb29b2b163e864af2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE