Static task
static1
Behavioral task
behavioral1
Sample
47978b9593a854433bda605411c2e50b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
47978b9593a854433bda605411c2e50b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47978b9593a854433bda605411c2e50b_JaffaCakes118
-
Size
40KB
-
MD5
47978b9593a854433bda605411c2e50b
-
SHA1
2a91705ecfdbf124bcaeeaddcb0ac465c0c700ac
-
SHA256
d22c49768989197184d207e570be1f8e9fd9bd26a428ec52a6708f57cb565a6d
-
SHA512
a2227cffd6143ac7513f174b3412185232cf5812f5b968adf3680bf709370a23bdb8d4f5933b8b18448125925a4178a813b3d8a4684881c5d0685d4ddf9a092d
-
SSDEEP
768:Mx3+HIKuKELXE3lKEj2o1ms3pJnaWaym8OhR+hU4XzRI7P:m34uD+IlEp1a1HCd9ID
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47978b9593a854433bda605411c2e50b_JaffaCakes118
Files
-
47978b9593a854433bda605411c2e50b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: 202B - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 39KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE