Static task
static1
Behavioral task
behavioral1
Sample
ddceecd72aed5449dfd760c27d893cac_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ddceecd72aed5449dfd760c27d893cac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddceecd72aed5449dfd760c27d893cac_JaffaCakes118
-
Size
693KB
-
MD5
ddceecd72aed5449dfd760c27d893cac
-
SHA1
79ba7776f966cdf63dbb273f067d6d933e668b9b
-
SHA256
9ce6b9cb16ce87d5b2e28cd58f874e63c95295bbe65e5f3289655482fb92e130
-
SHA512
95aa3161bbdb12c26b3661dd1c1261bf5aa8440b3d2220683fc1b855ad3b1a10764eaf8be8f12bb29253aa7f01a1f46a072c105c3c67dcef6518a694a781d16f
-
SSDEEP
12288:mIWZwCVOz5zn5isM3TE2Bf04KnAbu2w043DucAUSr:mI1CVOz5zn5isMjEO84K2x4TElr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddceecd72aed5449dfd760c27d893cac_JaffaCakes118
Files
-
ddceecd72aed5449dfd760c27d893cac_JaffaCakes118.exe .js windows:6 windows x86 arch:x86 polyglot
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 322KB - Virtual size: 321KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ