Static task
static1
Behavioral task
behavioral1
Sample
47217c4054978cac28ba5a1aa63d1091_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
47217c4054978cac28ba5a1aa63d1091_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47217c4054978cac28ba5a1aa63d1091_JaffaCakes118
-
Size
99KB
-
MD5
47217c4054978cac28ba5a1aa63d1091
-
SHA1
b9ee88236f4576ef9528404995ffd165134cbb22
-
SHA256
e0f36acb2ff8827d3e7e8770bcf908d57e48664e186dc2f38c0f0bb140fe3032
-
SHA512
d2a1b1cd38d70a07ab2341181e484b63d26d55b104353d6239683fa87d1298c55f9f0c447e44ad3cd6cbcb1a27a8cf981c2d7e2722b0a8d30d02e409ceb2b7ea
-
SSDEEP
1536:sKUCX9buUr8xSnq562HKWur9jycDL74VygTHWrbu+u:v3X9aUriSnqUC+fLwyRa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47217c4054978cac28ba5a1aa63d1091_JaffaCakes118
Files
-
47217c4054978cac28ba5a1aa63d1091_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 260KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ