Static task
static1
Behavioral task
behavioral1
Sample
476b557c09f8161b1ede095c1f7e767c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
476b557c09f8161b1ede095c1f7e767c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
476b557c09f8161b1ede095c1f7e767c_JaffaCakes118
-
Size
118KB
-
MD5
476b557c09f8161b1ede095c1f7e767c
-
SHA1
4659ae18fbfaf030b3b0031a456541df9b15138d
-
SHA256
b45c9563e115a91b8089bcf7cd5220ad6588f40fa3924d42f74ef299fb1c5201
-
SHA512
50c2930608e5d5f1953ea664fe5be293d09356afd8e8372a3a9d7bd3c7798c0bd9b3a52ed0ceac7fc1b86f572ed4f6a7f8fb49e64006dbf2ebb5f8533cb5ef31
-
SSDEEP
3072:KgxAcKOitJYjHN2FN9Jip2n2XU65LcK6n2Beeb7GuwVo3:KCAjJeAXsHE6F360Ae3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 476b557c09f8161b1ede095c1f7e767c_JaffaCakes118
Files
-
476b557c09f8161b1ede095c1f7e767c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE