Static task
static1
Behavioral task
behavioral1
Sample
ddf0bbe696dc924702fc376360b058f8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddf0bbe696dc924702fc376360b058f8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddf0bbe696dc924702fc376360b058f8_JaffaCakes118
-
Size
63KB
-
MD5
ddf0bbe696dc924702fc376360b058f8
-
SHA1
c275912e8fb4fc229a190eb7059a777c9d490772
-
SHA256
91f1cddedb05a06ac903e1195c55ef25f50952d4820d830b50e6caf378105cd8
-
SHA512
066d85a549006ce02d4ab315693b5926387bd932173a7516ea524a15bf01ab1bab4bd8f5eedcec7d7196fe84824df57e0502d26369d53e99aad4d45a6c067018
-
SSDEEP
768:i1JigJ1twqdRNxgfUBK369ZswKbX0jiviZvQGv6FHZJytTACcr8Dps/ipeGfC3Yp:inDdRNfoK9BUKsg0HZJypREipeGfC3c5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddf0bbe696dc924702fc376360b058f8_JaffaCakes118
Files
-
ddf0bbe696dc924702fc376360b058f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 14KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE