Static task
static1
Behavioral task
behavioral1
Sample
0447ce4234da2f2617db8bc959ddc6d0_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0447ce4234da2f2617db8bc959ddc6d0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0447ce4234da2f2617db8bc959ddc6d0_JaffaCakes118
-
Size
129KB
-
MD5
0447ce4234da2f2617db8bc959ddc6d0
-
SHA1
5fd17325d84478de492c9019fd52a00737004052
-
SHA256
2d3eb6f7e6c43020580a85844d3422c6cac23351f547bfd8dde3826b68a4cc87
-
SHA512
144210606a117e388a9f39a047b4b1bcfb42d7a2c4b11d2d3275cd3a75b5e0799e7f049d5100f7f939a2b39f774e194c5642c59ed9f5a11ad0e083b12f61aa8d
-
SSDEEP
3072:jJ9WEa6l3sEdoXQH8Czmr/tMTM8izn1jS3/kcj:jJ9Wn6l3bdoXQHzz4/tgM8Mn5Ccg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0447ce4234da2f2617db8bc959ddc6d0_JaffaCakes118
Files
-
0447ce4234da2f2617db8bc959ddc6d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE