Static task
static1
Behavioral task
behavioral1
Sample
48be7970c692555af2af227d25d5efda_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48be7970c692555af2af227d25d5efda_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48be7970c692555af2af227d25d5efda_JaffaCakes118
-
Size
126KB
-
MD5
48be7970c692555af2af227d25d5efda
-
SHA1
7d53167811753bd91fef20f7ec34beb164afbac3
-
SHA256
895028cba1f7b7fb5bd374cb897e5b622e1c6ea9dd9c3e71a02db258d2f8b0b8
-
SHA512
35789de5173fc96b1eb2f1fdc73fcd97b80204c8689b671f1b742c166bd818d02cc76fb74adabc71ad506c9624cfc21c358a8cb9f0f5f9afb862ab73f94edbbf
-
SSDEEP
3072:jO6TzC0HRqwhKDNZaOyL8Uoimn0ePTR/muYvj:jlHC3w2ZSF+4rvj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48be7970c692555af2af227d25d5efda_JaffaCakes118
Files
-
48be7970c692555af2af227d25d5efda_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
9 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mrcb2cp Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eb2u Size: 4KB - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE