Static task
static1
Behavioral task
behavioral1
Sample
ddc4ee0ca4e2f8326308d0b5d7e56cb7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddc4ee0ca4e2f8326308d0b5d7e56cb7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddc4ee0ca4e2f8326308d0b5d7e56cb7_JaffaCakes118
-
Size
105KB
-
MD5
ddc4ee0ca4e2f8326308d0b5d7e56cb7
-
SHA1
23a828d7e5b39ec94c2ae0e417fec2c4440d4015
-
SHA256
a5679f09971c1c7d9c58b5af169769c6b24cc4744691a1fbabaaf7aeada1f01f
-
SHA512
4610f9219713431a8ed2c0295c9c32f8f5b90486551c9396deda37c157f8a379049f2233ae065cefc963c3c14a600345205080ec60be3146c3e83558a5b06f25
-
SSDEEP
1536:Rf10yBYxKUkcY4p0ZdmZU6YBY922V1gD1pkbH4SvlqybLCmte8NIqInHMRbPyq3:RfqxKUkcSyG6bIEmhpkzblymZNAs1PF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddc4ee0ca4e2f8326308d0b5d7e56cb7_JaffaCakes118
Files
-
ddc4ee0ca4e2f8326308d0b5d7e56cb7_JaffaCakes118.exe windows:6 windows x86 arch:x86
d0643f2fb3158867f589534c8fb970fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
LoadLibraryExA
OpenThread
GetCurrentThreadId
GetThreadPriority
CreateEventA
Sections
.text Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kdata Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ