Static task
static1
Behavioral task
behavioral1
Sample
47d51a5a975aa36f5604b16dd000361d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47d51a5a975aa36f5604b16dd000361d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47d51a5a975aa36f5604b16dd000361d_JaffaCakes118
-
Size
14KB
-
MD5
47d51a5a975aa36f5604b16dd000361d
-
SHA1
458244155de25334f1eb47b16cb5936f507f3144
-
SHA256
53a1f07e529dbe42dd52049f5d8f07dd73cbf96d13f8b0eb84ddc8f40d872155
-
SHA512
a98454464c174d974fc498ea2bc9169a419710cdd12ef1f9f909570020fd6e6600eb254487ad4e9ea4e0b06778ac38abe5a6c39873406b263db2fcc3572498af
-
SSDEEP
192:HwpQPEQIo8lIuG8ksxN8gTj8CfbraCNhyODVsnOMCJXN4QVU4YPLJiJxKrl6opqd:AQPnIlIup/1bG/OQwjVU4CwJccoUVK1i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47d51a5a975aa36f5604b16dd000361d_JaffaCakes118
Files
-
47d51a5a975aa36f5604b16dd000361d_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 1023B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCryptor Size: 79B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ