Static task
static1
Behavioral task
behavioral1
Sample
476257d56b5ff8b4efe14e5982c47feb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
476257d56b5ff8b4efe14e5982c47feb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
476257d56b5ff8b4efe14e5982c47feb_JaffaCakes118
-
Size
68KB
-
MD5
476257d56b5ff8b4efe14e5982c47feb
-
SHA1
53b338548cb0cbadb9e70e51bfb2d7cdfe56ba7d
-
SHA256
c20ddddbea9651163646167110bef544d160f041c27e7fb5b52356f09a6c4774
-
SHA512
39d2f85a7beff6be61bf7472b1452aad0f4259ed82271bdecf0922b99b42dbda53c6c30f73fa1d020b5aa5719bcca6627b4cbea72fedbdad484b4a1d09b8ab58
-
SSDEEP
768:Jzp4xoJrh6Nug18jRTxOQ2Pa8CuI+dBDe2uFcCwdRnz+/uNGMnxBA9/gbaIcP+kV:X4xNqbOQ2Pa8e6Dpai6/uRnqgk9U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 476257d56b5ff8b4efe14e5982c47feb_JaffaCakes118
Files
-
476257d56b5ff8b4efe14e5982c47feb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ