Static task
static1
Behavioral task
behavioral1
Sample
976244dc476eb41cc1d93d33b82000db_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
976244dc476eb41cc1d93d33b82000db_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
976244dc476eb41cc1d93d33b82000db_JaffaCakes118
-
Size
675KB
-
MD5
976244dc476eb41cc1d93d33b82000db
-
SHA1
ced4e17a0787ec6253c8e5eeb4ed5e9ad1ddd25e
-
SHA256
3da72d46248d2ecaca3ec78a36f165f334c82a40100bc890eef5cfa9cd525672
-
SHA512
d39a39efc2dd4c623d5226b1a7d9069e5b9ade2d96cb359c9d54dfc87475f84f37cb6303f0b69a22270d76778eb90adce94e900f801aea8c1be0ea5a6b0ae80a
-
SSDEEP
12288:hdYcLWyVu3lVcyMVkak3SY3BsKF3Z4mxx9agSAZVJuxehS3/TFan:hycLfSkxOaY32KQmX9HjVJAehS3/TFg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 976244dc476eb41cc1d93d33b82000db_JaffaCakes118
Files
-
976244dc476eb41cc1d93d33b82000db_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 24KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 318KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 328KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE