Static task
static1
Behavioral task
behavioral1
Sample
48c6ac3074153e99b7eb56c89ffe8346_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48c6ac3074153e99b7eb56c89ffe8346_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48c6ac3074153e99b7eb56c89ffe8346_JaffaCakes118
-
Size
7KB
-
MD5
48c6ac3074153e99b7eb56c89ffe8346
-
SHA1
5786b678b1f6ac85f9ef929cbb509890a7ef43c6
-
SHA256
fffc0fb1d0e870c2f857dfba69088c05916a4de3d86e814acd36389d8bcdb4f7
-
SHA512
049bb6a8c0a66b665d0d36fa23740c19a0bb1f2fad5dcf1a0a1a378efce4763fc05a882ca29e3af0fa1feda7e10a5f82d3df49b7afb36abd9b83eb82b1577648
-
SSDEEP
192:R43Hc1Zl2uVAfNxl1THs6xgzg1GjPlRKynQAzX:RSHcMZxDTHfxmwq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48c6ac3074153e99b7eb56c89ffe8346_JaffaCakes118
Files
-
48c6ac3074153e99b7eb56c89ffe8346_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
.text Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE