Static task
static1
Behavioral task
behavioral1
Sample
48911072cc6fd41887a03c9f369db275_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
48911072cc6fd41887a03c9f369db275_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48911072cc6fd41887a03c9f369db275_JaffaCakes118
-
Size
128KB
-
MD5
48911072cc6fd41887a03c9f369db275
-
SHA1
1362763b0590e45308474f8bbc1a185d4feea254
-
SHA256
8457f971acf36e7d3eb43aaf5684cdb97494a8e8719813a5cb9009d65bd5d05a
-
SHA512
227b903c4fb3d8e00433a4d327219f337ba88c94be2f90e9f4f254c0f5b0ea79cb6998c940ca90cbfc722965bc2cb39207842e0970062abf8873b7089ff2df85
-
SSDEEP
3072:5e6vzsOxbhQYSP2qK4RogXEBKrQ6jG25EL9:5HzbQHPBK109QkG25
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48911072cc6fd41887a03c9f369db275_JaffaCakes118
Files
-
48911072cc6fd41887a03c9f369db275_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ