Static task
static1
Behavioral task
behavioral1
Sample
473b1b8163a97078ec7b83d9ca947c0a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
473b1b8163a97078ec7b83d9ca947c0a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
473b1b8163a97078ec7b83d9ca947c0a_JaffaCakes118
-
Size
91KB
-
MD5
473b1b8163a97078ec7b83d9ca947c0a
-
SHA1
548b4a4b0d5a9d5c5a3b0cd0a5ba9a4e7c488bc7
-
SHA256
1944857755a7f21132df98d84eece93fb123837fda08bfadc568cb377dca8442
-
SHA512
0ac1a8314c604b5f0819232f59f68a51ac18cd383a0216754082b8b624d5d65ef8b4b881bfc1e9edac42ca7a5ba0006afc814abdb5893ad4dbe9fc785b6f8399
-
SSDEEP
1536:GkrvHbql1T9SIA+kCz0PAfXV4pquGzjVs7XgjXgZyRCANmyTBZ1HRv1L/+/nouy1:/rPY1pcCEEXVJdVs7wUZyRrNmIRhNWv/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 473b1b8163a97078ec7b83d9ca947c0a_JaffaCakes118
Files
-
473b1b8163a97078ec7b83d9ca947c0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 240KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE