Static task
static1
Behavioral task
behavioral1
Sample
47f6beb6b0e60bf5503dcaee3bd07735_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
47f6beb6b0e60bf5503dcaee3bd07735_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47f6beb6b0e60bf5503dcaee3bd07735_JaffaCakes118
-
Size
103KB
-
MD5
47f6beb6b0e60bf5503dcaee3bd07735
-
SHA1
22481f1bdc35b8f682922de45d2fb195abcfcf2a
-
SHA256
7c9de6d533062c9e8d5599584cc1e507671a1f671a67b2bc3d7b4b26d6eab024
-
SHA512
ab5d33f508d77f2f4571abbdb9c17c325499e0321895999fb0ac0b1f813e14608eafd7b1ea6413e659430cfb4830c8102d3d8d03c8e0061bfc3b71c83e70033a
-
SSDEEP
1536:4kGVfZHRHKt/D+Jw2bxASVCyB6l4qV1PtbKybDzPFHnHHvUhIBjl4TlhuR30Z:yVfZx4/C6YvQ4vqVDKI1HHvIE2K50Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47f6beb6b0e60bf5503dcaee3bd07735_JaffaCakes118
Files
-
47f6beb6b0e60bf5503dcaee3bd07735_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 67KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.perplex Size: 1KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ