Static task
static1
Behavioral task
behavioral1
Sample
dda7edce12b4124dd7be6faf2843aea4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dda7edce12b4124dd7be6faf2843aea4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dda7edce12b4124dd7be6faf2843aea4_JaffaCakes118
-
Size
1.6MB
-
MD5
dda7edce12b4124dd7be6faf2843aea4
-
SHA1
a0f074733daa9e5715edd823186629ac3dd965b0
-
SHA256
f2311764e12c512800409cc377a36af427a6a3359476433e4762cc677209d9ef
-
SHA512
bf8b027719de6bda6b7416c45a9134bbbd4f8aca1e78c4b10c64c574d506589e75460199c5e7e4d4063eafe9ad0efdb0e083b90eefab2a3d220dddfba15a50d3
-
SSDEEP
24576:3cEqeoirXtjsFYCgVVtsFMQG/xkz0UuIViDY8Dy7uI7fQXIWoLm2I0dyV+oBMiXI:3cEqePV3e9C3HoC5JvY7j8mJhySlT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dda7edce12b4124dd7be6faf2843aea4_JaffaCakes118
Files
-
dda7edce12b4124dd7be6faf2843aea4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
services Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE