Static task
static1
Behavioral task
behavioral1
Sample
dd971b979eee8b1d1da18367a1e930ac_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd971b979eee8b1d1da18367a1e930ac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd971b979eee8b1d1da18367a1e930ac_JaffaCakes118
-
Size
437KB
-
MD5
dd971b979eee8b1d1da18367a1e930ac
-
SHA1
ec3968e1cc04e5900ef5dcbb95bcab531fa313a1
-
SHA256
c486ed73bf326f3a97ec662135071e0311847a22e878a097c2c6faf370579181
-
SHA512
64c644b0f046fd923947bde04c676de001aa7ba0ab481f29c984a7aaf40f6d6f0dc9044846421c2d02585ead1a84d740a351f82ef894d76ea1e6930463cd580a
-
SSDEEP
12288:s/quRsxZAxhMarNb1n5gs0xJ26qF1ca36c9U:siUsxihMS15gsQf2Xqc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd971b979eee8b1d1da18367a1e930ac_JaffaCakes118
Files
-
dd971b979eee8b1d1da18367a1e930ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 105KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ud2 Size: 324KB - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE