Static task
static1
Behavioral task
behavioral1
Sample
47d1327a4b304bdab90b2346a6b42a1e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
47d1327a4b304bdab90b2346a6b42a1e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47d1327a4b304bdab90b2346a6b42a1e_JaffaCakes118
-
Size
87KB
-
MD5
47d1327a4b304bdab90b2346a6b42a1e
-
SHA1
7a1d8964f22f5fec6123e681abcef80c3be0302e
-
SHA256
4ed0740fb76b48449622d1802529680e4a971c969a7a8bfd056558c0492d4228
-
SHA512
9981a0224c7ede838e4932152b7ed17de67b7363eeafb338307410544598c4e79ca3d4f1d1df5ece88096c62079c456a2e80d982cb4d54b1fec03cb1eea9b11b
-
SSDEEP
1536:UMawrrk2ez7FOUsBfDi30QxTurvS1RCtpDV/ifrzNRejJVK7AQMu:UMawQz7JTyt7if/UEsQ3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47d1327a4b304bdab90b2346a6b42a1e_JaffaCakes118
Files
-
47d1327a4b304bdab90b2346a6b42a1e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE