Static task
static1
Behavioral task
behavioral1
Sample
47043831712cb2dcb9140ed121ebe211_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
47043831712cb2dcb9140ed121ebe211_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47043831712cb2dcb9140ed121ebe211_JaffaCakes118
-
Size
44KB
-
MD5
47043831712cb2dcb9140ed121ebe211
-
SHA1
06425ea0f1af657817bc4d24244c9202dde8f01b
-
SHA256
e64567716cfa4b2510876d46f83ba8246c671774354582ac6d5889ad292f4538
-
SHA512
7f04ad3d234cf7129394d0680eb185c1f7adac518ae8901913ca8eb6949aac2e943b80815b17af736f6d70764b95f61d7099ec7b553dc23ac69faecc98418742
-
SSDEEP
384:CSoLUYZmtTNrkyiSdhO5qBtcVV+BLXF8zDJvRmbLTNw0PiHzLMAvlV+1liX+k/bG:CSooSGey32+tYzDJI/gHzLMA9V+1K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47043831712cb2dcb9140ed121ebe211_JaffaCakes118
Files
-
47043831712cb2dcb9140ed121ebe211_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE