Static task
static1
Behavioral task
behavioral1
Sample
deda03e8c46ecf9dff9b717d0e9e1065_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
deda03e8c46ecf9dff9b717d0e9e1065_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
deda03e8c46ecf9dff9b717d0e9e1065_JaffaCakes118
-
Size
417KB
-
MD5
deda03e8c46ecf9dff9b717d0e9e1065
-
SHA1
bdcaf5bc472dc79a88a9b047e52b72e15ace28dd
-
SHA256
091b7d0cd4056b4d8f69fcaa6a57f817fb1b570f6053f73784e9f79b82971916
-
SHA512
0c518cbb8d8fd8be76d31c783fc0d8cc687c7d61f727792cdfd972f09af42d02c20cd16c3e48686b6a0108cc7567c0a01021e1b2d5e6491787f6b464ef78bbc0
-
SSDEEP
6144:S5iEpJKwxsqH3FccAFnGH3b9R7HGe+I4fe0uxSXTuhehqRnWqMhoAxG:S5imy43GGH3b9RCe5HSXTWn3rAxG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource deda03e8c46ecf9dff9b717d0e9e1065_JaffaCakes118
Files
-
deda03e8c46ecf9dff9b717d0e9e1065_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ