Static task
static1
Behavioral task
behavioral1
Sample
474aed260cbded18b31951c4b6791e9d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
474aed260cbded18b31951c4b6791e9d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
474aed260cbded18b31951c4b6791e9d_JaffaCakes118
-
Size
17KB
-
MD5
474aed260cbded18b31951c4b6791e9d
-
SHA1
7b2dafbd815cd612db3bd58eef1ee9453b2826dc
-
SHA256
93f4bdc7d60fbbe7cb6a277085afffe1ef5e84e12cd4765192c502ee4ca2d372
-
SHA512
a378c9dcb6db008eede4239b2768072c0f3c1b242043083e65429797697f01270f24d2123f0bb0dfe7421753d2edeeb61ce2cb4168240c246ab2851a4ee9c53a
-
SSDEEP
384:JbWcVsMTx/vXjssDeDVtZmZcH9anhqW3DOk99Xy7x8CnCz:JrJFssDUVtZaU03SkrXOxvm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 474aed260cbded18b31951c4b6791e9d_JaffaCakes118
Files
-
474aed260cbded18b31951c4b6791e9d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.atls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ