Static task
static1
Behavioral task
behavioral1
Sample
48348e6b56836856171b263300759fd4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48348e6b56836856171b263300759fd4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48348e6b56836856171b263300759fd4_JaffaCakes118
-
Size
8KB
-
MD5
48348e6b56836856171b263300759fd4
-
SHA1
fd5989b0056250558142479741d566eb03aefd26
-
SHA256
a9c241514dafe8d2659d59b785ad085a01669ff7e3d303110646dc38915d2909
-
SHA512
9c4997188029f2702dfc609f6fb8163ce1992431f50196a9b5603892c6db6a92d33df53f5af53bd87fd0320e44591a51c4603bb759648aace9ce131268c85869
-
SSDEEP
48:68Z31shWB3Klx4hYbLOHpgJJSNQ5d8vAXQ4e8gsjnrSaKp3xIe5ykKCPuWBTBv7F:5W6alx+oL4sNSmw8R6aKxu4Td
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48348e6b56836856171b263300759fd4_JaffaCakes118
Files
-
48348e6b56836856171b263300759fd4_JaffaCakes118.exe windows:4 windows x86 arch:x86
65cdcf7f38a0fd181c6cb07d32d8f71e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontFamiliesExA
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ