Static task
static1
Behavioral task
behavioral1
Sample
48858288f5e425699c5599dbc29296d8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
48858288f5e425699c5599dbc29296d8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48858288f5e425699c5599dbc29296d8_JaffaCakes118
-
Size
238KB
-
MD5
48858288f5e425699c5599dbc29296d8
-
SHA1
044ac867afb6177344306e0f4e154fe4c4a32f48
-
SHA256
e83707a5f6b3dc6b6d591113fae618407dda2023c3b7c7412e527a7aece2815f
-
SHA512
33c0c970d872c93311d61f85e9d15df1f14fe3064f64913e55731aedb4107451a5742426692440aa38e4cb7068e7ba88a5f99dc342b8bf186ecccfa417786451
-
SSDEEP
6144:sjs2wlgDPQhOTxu8X6n9YnCmlPTGQQm6agrdnF:sPogrjk99mtTirdn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48858288f5e425699c5599dbc29296d8_JaffaCakes118
Files
-
48858288f5e425699c5599dbc29296d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 520KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE