Static task
static1
Behavioral task
behavioral1
Sample
dde70b849030f736d950b6e6b5912fe2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dde70b849030f736d950b6e6b5912fe2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dde70b849030f736d950b6e6b5912fe2_JaffaCakes118
-
Size
20KB
-
MD5
dde70b849030f736d950b6e6b5912fe2
-
SHA1
37184373f9aed85bbca9508889d0e4dfbbfba565
-
SHA256
6381b3d4a23c51c6e831c52cbbe45d6357c9edddb8d576686f1e2fc5ff26be7f
-
SHA512
c5b655f5c7a493d63d16e32a0394c78dd2539d0059bc51f57683733fb4d4b84ec7c917110d19bf80e8a70b83835694e369d2306aee9bc1f695014bf2e0484b5a
-
SSDEEP
384:3ou0e/ZqY1/+Zvg0OTVH/Ny3n8cZNQE4Iisqt2+++y6Pox2nr0xo:3ouiq/Uo0OH/NK8cZUtB+/p8nrso
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dde70b849030f736d950b6e6b5912fe2_JaffaCakes118
Files
-
dde70b849030f736d950b6e6b5912fe2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.0MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE