Static task
static1
Behavioral task
behavioral1
Sample
c48f7f9139b3351bc20a6b57a7540025_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c48f7f9139b3351bc20a6b57a7540025_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
c48f7f9139b3351bc20a6b57a7540025_JaffaCakes118
-
Size
192KB
-
MD5
c48f7f9139b3351bc20a6b57a7540025
-
SHA1
f6760b8293df69be80f5982fe91bbe91cc32f1b4
-
SHA256
8be0329917583292b25cf6f4cc362e0849b796187d9fc8740e2ca70b5ea62926
-
SHA512
1921ae0b59d33a4cdab6335665ef3580835cf291d4f62729820500fb47f8238ac99368fe81437bde82c80dc00050ec42aef05d20ad90a6cb5d319e8c19ce1203
-
SSDEEP
3072:yvhzoP2yI9wQMojc8GZEsJOLMhgZMLef4DtYJsE/+gNlHtpFl:yvpogeQMh8aEsJky0tQgNlHtpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c48f7f9139b3351bc20a6b57a7540025_JaffaCakes118
Files
-
c48f7f9139b3351bc20a6b57a7540025_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ