Static task
static1
Behavioral task
behavioral1
Sample
48567c59175f9f9d5605fe5b9d9fba4c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48567c59175f9f9d5605fe5b9d9fba4c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48567c59175f9f9d5605fe5b9d9fba4c_JaffaCakes118
-
Size
339KB
-
MD5
48567c59175f9f9d5605fe5b9d9fba4c
-
SHA1
85efd2cc30bc4863c5f3cb8c418e3f54532ed4fd
-
SHA256
62af469bb60d518fb5ade19bf00f416e8e7d729834fc1e86fa399bc75bb30226
-
SHA512
1abf54ad30a362f9bb2a2b1032e520a5bf7b60fc163f44cd4ceb3c5d979f33aa1518c8af1c5847f005ceaf427ee20642c29bfadb73409f59dec68cffd7d9e3f8
-
SSDEEP
6144:YOD5F2idZecnl20lHRxp3gjz2A5ZQ/Qk8+vqbBls6:YUzF3Z4mxx66ALHV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48567c59175f9f9d5605fe5b9d9fba4c_JaffaCakes118
Files
-
48567c59175f9f9d5605fe5b9d9fba4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE