Static task
static1
Behavioral task
behavioral1
Sample
48a2f157494c1a0255077b5496cd4458_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48a2f157494c1a0255077b5496cd4458_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48a2f157494c1a0255077b5496cd4458_JaffaCakes118
-
Size
99KB
-
MD5
48a2f157494c1a0255077b5496cd4458
-
SHA1
993be84b66097f0c865d6666d196e6b086a686e4
-
SHA256
4454217f11c3e1fa9085660cf7ecb9502be6f1ee0c517930bfa14b662bc298ae
-
SHA512
f806a92ec88d31ba720a6f880aee278e66bf487261654935d647959f723d60ccf73ea8bc3e8923b54c319716f59b156d57185d627cb108f00ab3571d45d00a09
-
SSDEEP
3072:/XGGv8HrfxJxmABecjcCgfeLGP152FCu1:fDv8HrfEbcjcrfeKPI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48a2f157494c1a0255077b5496cd4458_JaffaCakes118
Files
-
48a2f157494c1a0255077b5496cd4458_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 820B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE