Static task
static1
Behavioral task
behavioral1
Sample
48c42555fdcc13d5895da7424d3a2b95_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
48c42555fdcc13d5895da7424d3a2b95_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48c42555fdcc13d5895da7424d3a2b95_JaffaCakes118
-
Size
64KB
-
MD5
48c42555fdcc13d5895da7424d3a2b95
-
SHA1
5e145f76c36cbad65919b0756a72f46d84c8c0d8
-
SHA256
c03e2c97aa69f87df204a44e059a2265c3c0a512541b3e5af1c3760b01e71d72
-
SHA512
2c3800aaecbf421800934fec9e16856464004699e5546a9297f5f99f01bbc334c1f0c1bfd532f5be1613b8fc7a9d99d16728ee4ae76dddf9bb3de03d7a0b4151
-
SSDEEP
768:XivR95RwDKtqfNJSFzo/8Bt2Xiz7bYoh8T0Bz4rVqc1s7GPAyeGYbpae2o7CDK:Xq95btqfNUiGt2G8IBW9TAynYb3gDK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48c42555fdcc13d5895da7424d3a2b95_JaffaCakes118
Files
-
48c42555fdcc13d5895da7424d3a2b95_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 54KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE