Static task
static1
Behavioral task
behavioral1
Sample
f48cb616cbebd3e6b18df669b7be9255_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f48cb616cbebd3e6b18df669b7be9255_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f48cb616cbebd3e6b18df669b7be9255_JaffaCakes118
-
Size
23KB
-
MD5
f48cb616cbebd3e6b18df669b7be9255
-
SHA1
0dc174efb8d1977e1cb62fd9cfc0009c3bb7c92f
-
SHA256
9594265a8ed4ba6c8e64a8fd890da278a195c8e04972814a302e0b35670f6e89
-
SHA512
318a109a1b06b1c2d9dd423d6866720b9cb462e5ae3baf065225ab32d044f0f00edcbe459a8a0ae734555a7dccb168e82d8cb3e778733fafa11815f6a73d7982
-
SSDEEP
384:A8GMsSst08yYP9W0lZvRk7oD5DLwq0/NMTtes6hEoDCsnB9a:/rs5W8/9W8vRksDlLwJNMTtGDCs/a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f48cb616cbebd3e6b18df669b7be9255_JaffaCakes118
Files
-
f48cb616cbebd3e6b18df669b7be9255_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.SECURE Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SECURE Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SECURE Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE