Static task
static1
Behavioral task
behavioral1
Sample
47c588da95a39acee33270f5108bdb6b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47c588da95a39acee33270f5108bdb6b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47c588da95a39acee33270f5108bdb6b_JaffaCakes118
-
Size
1.9MB
-
MD5
47c588da95a39acee33270f5108bdb6b
-
SHA1
bd693d4fb2366a4b5013d1b71dd05d9a9ed2eef9
-
SHA256
061a0d077c7a75c170c6736f0e4fb16f5bcb1f257540a114697126cb849cc845
-
SHA512
6b3a933cbff5431cdb7d4bafccbcd07db6dcb1601d8d3e07395b7e82d9fd80568881044d2b95ab12438e5d349ffaa6dd20a3eeede28eb0b5b2764b6aee698b13
-
SSDEEP
49152:9QI7kIQKtIqP9Dgu80PFHEW0UMZS+g1GU8y6xFW1MxzJLP:9QakIQKtIqP9DgpYFHEW0UMZS+g1GU8V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47c588da95a39acee33270f5108bdb6b_JaffaCakes118
Files
-
47c588da95a39acee33270f5108bdb6b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.koxkfd Size: 1KB - Virtual size: 740KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vi1loq Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pu5ofd Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3ivlg9 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dkatj2 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wgchle Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cws7q4 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.info Size: - Virtual size: 3.0MB
.null Size: - Virtual size: 452KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: 630KB - Virtual size: 632KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE