Static task
static1
Behavioral task
behavioral1
Sample
dd8a2b19831d998397f93d4621a6205c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd8a2b19831d998397f93d4621a6205c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd8a2b19831d998397f93d4621a6205c_JaffaCakes118
-
Size
1.2MB
-
MD5
dd8a2b19831d998397f93d4621a6205c
-
SHA1
530c41753598b1332299f73babc5b9ad519892da
-
SHA256
3b19c5c440f6af02d3dc8d85c2b8112cd14e5f9d5ed4c6e64bb8e075389720c8
-
SHA512
a44d778d66ad5013ed5cb4907bab9f0aef7626e8aadf897db7212503ae4603b81f53c44a366bf72fcbc678013b9f187ff471dd8aa6963e18587b2b756ed88197
-
SSDEEP
24576:+/miAJACn8NPwqiMOkyt0bmECXDU24OjuW5m7ujK0TBPaatsd:2miAJd8NPwqbWwmEsDJ1j7mJ005
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd8a2b19831d998397f93d4621a6205c_JaffaCakes118
Files
-
dd8a2b19831d998397f93d4621a6205c_JaffaCakes118.exe windows:4 windows x86 arch:x86
9e7f9471fdc22a82b975f1f6cec702f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
ExitProcess
VirtualProtect
GetProcAddress
user32
GetSystemMetrics
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ