Static task
static1
Behavioral task
behavioral1
Sample
48724393e6d35ef6ee570f65002d845e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48724393e6d35ef6ee570f65002d845e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48724393e6d35ef6ee570f65002d845e_JaffaCakes118
-
Size
65KB
-
MD5
48724393e6d35ef6ee570f65002d845e
-
SHA1
7cf3a5834af38def08a2c3f3251f23fa49f184fe
-
SHA256
000108c0692ccc08d34a647dc4b5148afd69b6347df9e5f49d24095e7e0334bb
-
SHA512
6dff90a4aa49501f9409400ab943a7b639c883d6fddbe247b95e52bd49756db5533ad0f9c50995b3d6fd842a5e0f9192a32934b0aa38fdbedbc7acad6c87c1f8
-
SSDEEP
768:b9bhlpxJW9AlIO3kC4CUNrtqLq3zzkSC7AtlC3BJXq/yZmc6O52YYGyMP:b5hlp3lkClYUATC3La64c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48724393e6d35ef6ee570f65002d845e_JaffaCakes118
Files
-
48724393e6d35ef6ee570f65002d845e_JaffaCakes118.exe windows:4 windows x86 arch:x86
95372e66bd4f8957c874a918401b5984
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
InterlockedExchange
EnumSystemLocalesA
WriteConsoleW
GetEnvironmentStrings
IsValidCodePage
msvcrt
fgets
_wcsnicmp
_wfopen
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ