Static task
static1
Behavioral task
behavioral1
Sample
47f8749da430ae50ef7fe8d6f6f5691a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47f8749da430ae50ef7fe8d6f6f5691a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47f8749da430ae50ef7fe8d6f6f5691a_JaffaCakes118
-
Size
576KB
-
MD5
47f8749da430ae50ef7fe8d6f6f5691a
-
SHA1
a896810ea194d91da69d78e564f5d15028c5fda7
-
SHA256
4524faddd8cf2c2017a69f4651499808f5a50ba965cdeb81464602b105f161fa
-
SHA512
492e73c3634df3a1743a148e5a5d331a5a7bc7514045597e0bdc0a975a12c382d2f97f988a6f1c5a04af14d2e42a7ebefb0c2f2571c868b0656f969d0f63ceb5
-
SSDEEP
12288:PC3+PDcM2uhRL2cyaSegvjdUdUgU51YBQ/6RPhp8O/g:PCOgM2WR7yaSe8jdUdUJQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47f8749da430ae50ef7fe8d6f6f5691a_JaffaCakes118
Files
-
47f8749da430ae50ef7fe8d6f6f5691a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 300KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ