Static task
static1
Behavioral task
behavioral1
Sample
dd896125c06992bf864697515b4e397c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd896125c06992bf864697515b4e397c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd896125c06992bf864697515b4e397c_JaffaCakes118
-
Size
473KB
-
MD5
dd896125c06992bf864697515b4e397c
-
SHA1
6e0a7aa4b98b956d4b7d19f6950a9190ba709ad5
-
SHA256
307333b267a5d66e607891db27cd126c52c187a74188ea88f49219d7e56e63a5
-
SHA512
8fa3109aed308c9842402da1c3bef992d34cefa670933868e0c3857d154fe6c1ee9935b1855eff9d6051bba60378a212fa5e19c2b9a245102c66efbae02dbe36
-
SSDEEP
12288:iNY912yJXClB4fgAlNMLJOf2vrdNYCLSaWU3A8:iNg12uXClWX3kJOf2vrdmbU3A8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd896125c06992bf864697515b4e397c_JaffaCakes118
Files
-
dd896125c06992bf864697515b4e397c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 142KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PuffCock Size: 327KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE