Static task
static1
Behavioral task
behavioral1
Sample
048fd0bcbfff4c59a66027203669f65f_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
048fd0bcbfff4c59a66027203669f65f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
048fd0bcbfff4c59a66027203669f65f_JaffaCakes118
-
Size
43KB
-
MD5
048fd0bcbfff4c59a66027203669f65f
-
SHA1
1f67a00dfca102f9bcfda0a1f965b7d937ad735c
-
SHA256
20612d35e96136a0233f94be41e74b715a6ee64880faee053d7a1ed3523b0815
-
SHA512
50307820486f1fd7279cec91afa10f6967178e602cab7713d5f964e492a1612d90478e02d05d45426d933d65fa70b51d572563c54b994b86b34d065d458d0fe9
-
SSDEEP
768:Vuac16aV9zri9LA9Sei5A/wvdpShTzyQtmYiD/+j4laBkdbXqzGJVLF6aDC5aKp:VuFV93i9LWSeYShTzyQHjo0g7zLWhp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 048fd0bcbfff4c59a66027203669f65f_JaffaCakes118
Files
-
048fd0bcbfff4c59a66027203669f65f_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 41KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE