Static task
static1
Behavioral task
behavioral1
Sample
ddb7c9be2b52d396bd3a14feed33e50e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddb7c9be2b52d396bd3a14feed33e50e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddb7c9be2b52d396bd3a14feed33e50e_JaffaCakes118
-
Size
118KB
-
MD5
ddb7c9be2b52d396bd3a14feed33e50e
-
SHA1
fed489a4e6da9baf69b8857b4529a4ed076f31f0
-
SHA256
b313bd6d356616ca76fb5d4de152469e51362d0619ace513811ab87c33a1c60b
-
SHA512
c8ce2c0b3f170ba1d3b2e5220d65f26cd158db978abde6804b1d74bfe5fe0fb2749d7cb2168b92b26a4fd61500ccfff5df8e761e1b70748c43e6b41e14ee693d
-
SSDEEP
384:Le5wA0p1F+wHxXvjX3hwlHt6oIfESxMq7HoOOP8i//KAuxMasuVuWdxWigEarvFj:LeqXnToIf1tIO82xMUx8Ea7Fst
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddb7c9be2b52d396bd3a14feed33e50e_JaffaCakes118
Files
-
ddb7c9be2b52d396bd3a14feed33e50e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 52B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ