Static task
static1
Behavioral task
behavioral1
Sample
47d678a9f19625d9622f0cd0e85ac659_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
47d678a9f19625d9622f0cd0e85ac659_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47d678a9f19625d9622f0cd0e85ac659_JaffaCakes118
-
Size
409KB
-
MD5
47d678a9f19625d9622f0cd0e85ac659
-
SHA1
1265c2e7996ed52ed804c95f28ed12130274569b
-
SHA256
f32c77d2d290af8540143e9c32a2e89ab2684d86465f9fa0d427301d1eca0ec4
-
SHA512
bc763e070ed3c9c44450e28efe9299fd2faf9104c210c22e4815b478912b659d3af68675aab2f24dc53e2d69bc23925c4e38b79fbd0d01d8972373d69bf019ae
-
SSDEEP
12288:osgxKwwOt3yRwll+wy4WYvC1Kfi+uZxps8i/k2B:o/K7Q3yaDU4ufVO5B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47d678a9f19625d9622f0cd0e85ac659_JaffaCakes118
Files
-
47d678a9f19625d9622f0cd0e85ac659_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 684KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 407KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE