Static task
static1
Behavioral task
behavioral1
Sample
ddb37ee916016b681b6d2ff2b01be438_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddb37ee916016b681b6d2ff2b01be438_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddb37ee916016b681b6d2ff2b01be438_JaffaCakes118
-
Size
82KB
-
MD5
ddb37ee916016b681b6d2ff2b01be438
-
SHA1
b512ac1bdd71ef797b4093221b0dae0184d72d77
-
SHA256
cd904d50e9a600e45626c59b779eba49017594d3955a8df7fe4a8e754f922545
-
SHA512
eb311f1fc43bbf560c660c34da64a0ffbf82279828ce2948f5ebb2140afe8a16b64e7061495a44238e9e0fa59bad594f738bfb3632ae87521441ce48f3314879
-
SSDEEP
1536:siWab2wD/n2n7VgNiNJ82ww5/w8S3lqYY2OVMTRfVHHNyRNfFACfvQpSOq1Ob:sabfD/n2n7H/alDOVMTRNHHNyR9SA4pN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddb37ee916016b681b6d2ff2b01be438_JaffaCakes118
Files
-
ddb37ee916016b681b6d2ff2b01be438_JaffaCakes118.exe windows:5 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
.flux Size: 50KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flux Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flux Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flux Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE