Static task
static1
Behavioral task
behavioral1
Sample
7c476f0bb209ee351c9e6300ebace62c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7c476f0bb209ee351c9e6300ebace62c_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
7c476f0bb209ee351c9e6300ebace62c_JaffaCakes118
-
Size
431KB
-
MD5
7c476f0bb209ee351c9e6300ebace62c
-
SHA1
caee248e5de42685c22350dd45d90a143badeda4
-
SHA256
d9698032b8aa798574cc06e211e1a499b21ab0f4ac5ea97108331f6815217e49
-
SHA512
e5ef0e090c093fdbc6ab8b00b8ac8f702333e6395f1e9644794056cd5a2e83690a48b975c04115eb08047bb41b11d64c62746c460e1c7a709e69ac2327cc2128
-
SSDEEP
6144:Ulsy4TNbEm1B1zzqaCh9Ju/2x+vw0b8ajNglS2+gUXpP9YC4rE9:UdwNIm1B1zzqrh9Jf+btwSfgUnBIE9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c476f0bb209ee351c9e6300ebace62c_JaffaCakes118
Files
-
7c476f0bb209ee351c9e6300ebace62c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 269KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ