Static task
static1
Behavioral task
behavioral1
Sample
48539c72725952ee944ab4ff9f01316b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48539c72725952ee944ab4ff9f01316b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48539c72725952ee944ab4ff9f01316b_JaffaCakes118
-
Size
163KB
-
MD5
48539c72725952ee944ab4ff9f01316b
-
SHA1
1ad7c30cd1c380bc58be4a660a1ef8bdea4200b5
-
SHA256
d5c6c72c4018a99d9b663261f17f63166a97fc6da09f699b602733236d6e20d6
-
SHA512
4bf2d0b49ea32a0eafa468c9d4786e4a7bf6198f89a277835b650a74ea9ec46b9945bc84580dedec723511e04227710dd612f614b4b197c1346be31a631a2e3e
-
SSDEEP
3072:1x5C+kSqCquG1InDfsTK2a7XdMNmk09bC5oX86maRDEbFUZWVn+yf:c+U636K2OXWYk09bC6RDEpUgp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48539c72725952ee944ab4ff9f01316b_JaffaCakes118
Files
-
48539c72725952ee944ab4ff9f01316b_JaffaCakes118.exe windows:4 windows x86 arch:x86
abff23744dd75795e1f9179f2a987e95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
.MPRESS1 Size: 111KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 953B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE