Static task
static1
Behavioral task
behavioral1
Sample
ddffcc8fe258af24fdfd6c8cc7d7685e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddffcc8fe258af24fdfd6c8cc7d7685e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddffcc8fe258af24fdfd6c8cc7d7685e_JaffaCakes118
-
Size
77KB
-
MD5
ddffcc8fe258af24fdfd6c8cc7d7685e
-
SHA1
72933123321596111a45efdc38884129a5efacff
-
SHA256
592937c17fb2d167eccb0b0cea919297dd47b9808f0e7b5d24fed000bd3ff491
-
SHA512
28b69cad7129f9f65bd3ba7fa742aef577ec984d927ee5c2ea8989f7d8789778a3c695f78ca01d46f5dc0fd94aa952aedaae8fe26b65ab07219898ea8fe59ae8
-
SSDEEP
1536:xOZXsgDHoqXQVQMAb8dZgsTHsis//WCFIsRUbuAwipvk7SOdV1xY+r0:S1Qd2wTTHZs//syUbu/Wvk7t1x0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddffcc8fe258af24fdfd6c8cc7d7685e_JaffaCakes118
Files
-
ddffcc8fe258af24fdfd6c8cc7d7685e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 542KB - Virtual size: 542KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE