Static task
static1
Behavioral task
behavioral1
Sample
48b769622badd45708732993c600f252_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48b769622badd45708732993c600f252_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48b769622badd45708732993c600f252_JaffaCakes118
-
Size
433KB
-
MD5
48b769622badd45708732993c600f252
-
SHA1
9e8faa18fe3885999dfa945a7dcd7c19b29d01c3
-
SHA256
0edf8a6502c00ae3a00c6f97e87eda13f63e11e8b43c0b38c5d210a3f8c72145
-
SHA512
93bef17c8960e3af17ae2fb36e6dd7b3da6ac423c626e814528883d9671d6451a4683f12eb3d6920ca60bef9f275f0cba3a5cae39e0f85c44cd336ba2488bb72
-
SSDEEP
6144:bTt3hSDEHXIuJmZYXyL1rnO0UwLmjeMFvxepTDcvHOVkJLpjvLM+MJLhqb:b05uGBO0pLJD8OVWjMJEb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48b769622badd45708732993c600f252_JaffaCakes118
Files
-
48b769622badd45708732993c600f252_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 333KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ