Static task
static1
Behavioral task
behavioral1
Sample
476d9f65e306ea2fe526ce964265eefa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
476d9f65e306ea2fe526ce964265eefa_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
476d9f65e306ea2fe526ce964265eefa_JaffaCakes118
-
Size
124KB
-
MD5
476d9f65e306ea2fe526ce964265eefa
-
SHA1
b40eea4241da3c6c3afa3ee721e5bedd9cee467a
-
SHA256
7de600f36a857054b3b1cbfc3866323e719705109b8fcad0f6597146a86f7f82
-
SHA512
92c7f0e05a0b6a1697e16c5c36e4b850355a909b706a8ce4c0bc0b2fcc6dfcb30f0c227a50c5e502aa5d809fb0e5d93a57ca664df2b4880e3140599eec97e31d
-
SSDEEP
3072:fpVQh2tU6pxBLcW9WPL5lFs5DXqnIePFWSB:f7gKB4PL5lFsp6nRFB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 476d9f65e306ea2fe526ce964265eefa_JaffaCakes118
Files
-
476d9f65e306ea2fe526ce964265eefa_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 588KB - Virtual size: 587KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 802KB - Virtual size: 802KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ