Static task
static1
Behavioral task
behavioral1
Sample
847a2bd5a89ecbbdf999a92b6b5d8c60_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
847a2bd5a89ecbbdf999a92b6b5d8c60_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
847a2bd5a89ecbbdf999a92b6b5d8c60_JaffaCakes118
-
Size
14KB
-
MD5
847a2bd5a89ecbbdf999a92b6b5d8c60
-
SHA1
ce56e994c21833b9941d792b45e3c52ce5339c06
-
SHA256
d7ce42b1e22b12b1004436637ac6a8ea0c3f00d5c27bcb3c195d079bc217b88e
-
SHA512
853233372b5eeafec4ee05a0aa140fc19b5d5103f70ca409cd66d6e021274789eac0aa74b9ad81aeb2c662b6b43c7b04f05f289daf54dfc271a925604c646203
-
SSDEEP
192:aBRKZ0+MQ6ZAvQWh/fkvOJvgatO0PxkFy5gdbdhXB+IUcAGb4JzGkBk/iQKwbimi:4RNPQPrLvttO0Zx6d3aCb4h3JQKw+iOp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 847a2bd5a89ecbbdf999a92b6b5d8c60_JaffaCakes118
Files
-
847a2bd5a89ecbbdf999a92b6b5d8c60_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
Sections
.text Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE