Static task
static1
Behavioral task
behavioral1
Sample
48a86dd6b658baec27aafc632f37bb68_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
48a86dd6b658baec27aafc632f37bb68_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48a86dd6b658baec27aafc632f37bb68_JaffaCakes118
-
Size
745KB
-
MD5
48a86dd6b658baec27aafc632f37bb68
-
SHA1
bbe04c9270dc1bb683d6ef76d083f1eac5aa6d01
-
SHA256
5d3e3bd77031f0764d37a38cd20b8d6f643a7cc415689a1d2e6d6ddb22710671
-
SHA512
c9c9632219508e038b097904a2a136e7f5018b93f946d4730837335104a5d0a4aa344de61f05a390ccc828783e0133f371fdf22b699f3d621131234c2360c36f
-
SSDEEP
12288:S3zSoei06kZchzd3HnSU3ybDAxPZweYHs8sJMnNyKBQ0J4aNPDQTM5NNgLVMo07U:szSJTcFd3DibDcPiHRsJMr34aNPDQTMa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48a86dd6b658baec27aafc632f37bb68_JaffaCakes118
Files
-
48a86dd6b658baec27aafc632f37bb68_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
7:J TfV^ Size: - Virtual size: 609KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
LcZ6ZGGA Size: - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.`cwfa+O Size: - Virtual size: 9KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
i^l_r!h] Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
K[uF$<Lk Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-Y$.0V0x Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hV-p<pm, Size: - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GcrQ$P_' Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
&p\2f1Q" Size: 744KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE