Static task
static1
Behavioral task
behavioral1
Sample
48411670b4bd02c6287156b7d2afc910_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
48411670b4bd02c6287156b7d2afc910_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48411670b4bd02c6287156b7d2afc910_JaffaCakes118
-
Size
63KB
-
MD5
48411670b4bd02c6287156b7d2afc910
-
SHA1
f286d7a0c3a10984b1e5d940f252cfaa1f9de6d8
-
SHA256
8364f1ca82dd507152fad936840a913e7cc073144bb8072ed77b798417ea5f9f
-
SHA512
f95f1c6c7092c4b888fc1a91931f5858b8f6b271ef298df7337169e91fdd316cdf3ffa01e13fe9af08ff6aaf20cb6161086e6d30aa9d9b83a7df31a069ec632f
-
SSDEEP
1536:AnOCji0/pvaQ3oKr2CshxHGK7HqUT60ekA:EOi/pvX3oKrmvmGHq4tA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48411670b4bd02c6287156b7d2afc910_JaffaCakes118
Files
-
48411670b4bd02c6287156b7d2afc910_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ