Static task
static1
Behavioral task
behavioral1
Sample
dde89d6d0b5007e2b3b9798b81b4c81a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dde89d6d0b5007e2b3b9798b81b4c81a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dde89d6d0b5007e2b3b9798b81b4c81a_JaffaCakes118
-
Size
172KB
-
MD5
dde89d6d0b5007e2b3b9798b81b4c81a
-
SHA1
f64ae9bdf89193133ed323d0fa36718aaaa21fa6
-
SHA256
cab67124770aced72f0ed244239030ede846a015434702526dac38cfea8f3eb1
-
SHA512
4e5438a4c95fb3f1895fab3a0e0ce25be3c3ecc990faffd7c14c829eb425e8699638a7f8c2c8891d4762f282103c2079930e17b7c78bbbd66685910742811890
-
SSDEEP
3072:Kz5b3V9ZCbgSiL/6g2UGy3rrKtNxpN1ViwEvpbU1154rglTK+/lYNKXblBrjxN3v:w5bFmbgSiL/6g2UTvanN1VGiXk1NKrTD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dde89d6d0b5007e2b3b9798b81b4c81a_JaffaCakes118
Files
-
dde89d6d0b5007e2b3b9798b81b4c81a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 702B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE