Static task
static1
Behavioral task
behavioral1
Sample
47e5069ba8e5a853a3914c347c1820ac_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47e5069ba8e5a853a3914c347c1820ac_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47e5069ba8e5a853a3914c347c1820ac_JaffaCakes118
-
Size
254KB
-
MD5
47e5069ba8e5a853a3914c347c1820ac
-
SHA1
2d008ac56b0c4b09977411313cec542ec91f724f
-
SHA256
520b779311ccefdd3c7a2a20816d00f01a7f7db03ba4fe2ea003d7676908456c
-
SHA512
3189f76a67cce8a5d81f5833c4efc83ec2d8cbab566e486cd99f77d6b4c3ec4aa77ce1945d70d8e43c81e2d781781fcd8fc77b66bd983fc4942916ac43a861d8
-
SSDEEP
6144:2W2fZnURdwGUZdp6fmsK1OgQEaE+MgpFxqUtv6k5:Uta4wfpKsguE+Mix/vB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47e5069ba8e5a853a3914c347c1820ac_JaffaCakes118
Files
-
47e5069ba8e5a853a3914c347c1820ac_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 460KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE