Static task
static1
Behavioral task
behavioral1
Sample
47276f2ada35dd0e84a63527de50b3f9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
47276f2ada35dd0e84a63527de50b3f9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47276f2ada35dd0e84a63527de50b3f9_JaffaCakes118
-
Size
42KB
-
MD5
47276f2ada35dd0e84a63527de50b3f9
-
SHA1
78ea0b13fcbbbbe9121c2ac951a66dd0015d74f9
-
SHA256
0ab81a41cee16ba3b95c8b56430977d46af4c22bd5db4e249cff8242d6140c15
-
SHA512
a30c0799ab2996982dedc64a7f583af37ab2b98456ccb8a3bb5d92c920e379f79d33454c387d877fa1dfcdf3bbb225422ed57baa8f15443f2787111698470561
-
SSDEEP
768:58EzWOTcvI4XY9ZLSpG4YkxXl0GdI2FwPyNqPdERh853Iql8GdjwLzw5/7Y:5qp7YnLSpG9kxSyoow4PGdk47Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47276f2ada35dd0e84a63527de50b3f9_JaffaCakes118
Files
-
47276f2ada35dd0e84a63527de50b3f9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 668KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.6MB - Virtual size: 19.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ