Static task
static1
Behavioral task
behavioral1
Sample
f47a2b339cbbc25398fcaaf75aa2235d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f47a2b339cbbc25398fcaaf75aa2235d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f47a2b339cbbc25398fcaaf75aa2235d_JaffaCakes118
-
Size
266KB
-
MD5
f47a2b339cbbc25398fcaaf75aa2235d
-
SHA1
35c43081e185f4c12211c6201d06a2a15b270293
-
SHA256
76fddfb4be851e31420f73dedb764dba95279f70682759f1de3e489ddb42d158
-
SHA512
2a64a82a939afb192f1863adfa6238407beb1cbd173ab16b4e423fc0d9760ec51c0379400538415b1adedc0197691ce3c0d8c53d8db85ff73930fcf6e3ee1909
-
SSDEEP
6144:eTmaTjevNqXe62JlzwXLTiw4HGzd+vh5WyjXVFbEo038:eTmujsQXefM7b4mzd+XPd0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f47a2b339cbbc25398fcaaf75aa2235d_JaffaCakes118
Files
-
f47a2b339cbbc25398fcaaf75aa2235d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 94KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 137KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE