Static task
static1
Behavioral task
behavioral1
Sample
ddbbc1adfb89a7efc303a83a22cde0a5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ddbbc1adfb89a7efc303a83a22cde0a5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddbbc1adfb89a7efc303a83a22cde0a5_JaffaCakes118
-
Size
91KB
-
MD5
ddbbc1adfb89a7efc303a83a22cde0a5
-
SHA1
9dec902f5356431ee6ec19b2f6687a3d2f38cd7c
-
SHA256
8be17a116f29da3d4214d54cf0868898863b9cd74a27502a5a4fd7c936f6f77a
-
SHA512
6e94e6d232316285064f806e00a94541aef8ff3c178a4f3bd2d7938605af0aa79092f4de4ed3ca00bbfc1e648935e6e533cb65cdf3e002d7f2d647b9803a628a
-
SSDEEP
1536:HI1nwAvHt2VRhwsWCZtmVncyv+yNA9p/bxWGKaYrBXB5DoSLHxATAiF6Nnlh8:HJAvHtqhXv0Dv+yu9hxWQMXB5USd2vFx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddbbc1adfb89a7efc303a83a22cde0a5_JaffaCakes118
Files
-
ddbbc1adfb89a7efc303a83a22cde0a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
15a40fc888a24c3586ca9563306e006f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA
LoadLibraryA
user32
wsprintfA
MessageBoxA
Sections
.data Size: - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE