Static task
static1
Behavioral task
behavioral1
Sample
47da9c0a75c1ef33f811c3f2886a5ff2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
47da9c0a75c1ef33f811c3f2886a5ff2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
47da9c0a75c1ef33f811c3f2886a5ff2_JaffaCakes118
-
Size
101KB
-
MD5
47da9c0a75c1ef33f811c3f2886a5ff2
-
SHA1
d1d7654f9b872075850dcca224c543e1a8578cb3
-
SHA256
2d9412f9f7d9eac1285c320984b92bb5f3fa7545301ae83f2da2220475889d16
-
SHA512
466da4be2289ff3970bf77a140330560aca6d773a9783690dbf7dea2a588c81c015b94813a057e84528417febc2dce7f87d4e98ff42a00b9d52d9ae02c02f003
-
SSDEEP
3072:Z8UGoupAYAlliNyJzm4AhSm323CyoimVKtB79Xs:Z8Loh2h1NYtBZXs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47da9c0a75c1ef33f811c3f2886a5ff2_JaffaCakes118
Files
-
47da9c0a75c1ef33f811c3f2886a5ff2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
zro49 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
54x Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
47bicr8 Size: 724B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE