Static task
static1
Behavioral task
behavioral1
Sample
a747e5955bf1dd33865496fa0394dc35_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a747e5955bf1dd33865496fa0394dc35_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a747e5955bf1dd33865496fa0394dc35_JaffaCakes118
-
Size
738KB
-
MD5
a747e5955bf1dd33865496fa0394dc35
-
SHA1
47d5443115af5435c332b83bda3c0e1f995dcb1a
-
SHA256
e767ef3aab7d5c007d797e303a2f022180b182a97ea8dfdafe166430e15f4001
-
SHA512
7eea3c87e378aa3a6ca2f36f905b7c3ff7ff2e551ec74d63deac9266f62dcb756221f5ffbfb078ce6ef519792bf5d6de446e12024e043a2050320474e31ce19a
-
SSDEEP
12288:00tCePDpEEJoGqOOxSGaL75xDKfNU2koTKEdJCJYC3MocYnmVcSVDQTLr:SeLqyqOOx1a3vDKe2koeEfCJYC3FnmVs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a747e5955bf1dd33865496fa0394dc35_JaffaCakes118
Files
-
a747e5955bf1dd33865496fa0394dc35_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NOS0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NOS1 Size: 149KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE