Static task
static1
Behavioral task
behavioral1
Sample
48d9cde2bc2ba1e053fa9488adc15ddb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48d9cde2bc2ba1e053fa9488adc15ddb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48d9cde2bc2ba1e053fa9488adc15ddb_JaffaCakes118
-
Size
25KB
-
MD5
48d9cde2bc2ba1e053fa9488adc15ddb
-
SHA1
023f8cb74a95a4d9c4229d7db1c7d5c4fa39705c
-
SHA256
85c51cf4ae169e6f121473461ea88811c2b6b0f992060aa401e205789003e49c
-
SHA512
d35d499f4aa7810a52ed3eb57db24587b2cdd971edd34db5ab4e073bc8c33b161d796566376ec7bd5505cc853ca944e7308a9ed24f8201413f5509f7f99ce4be
-
SSDEEP
384:cdJu3WTh6IPQmjFkKDKPeLiG2uijhh0CpN+mroqjyi5UyX1nc6E/ZOH6Xl4sMq9w:1WTVPfjFkKmnukFz+m0qjcCnc6C4PL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48d9cde2bc2ba1e053fa9488adc15ddb_JaffaCakes118
Files
-
48d9cde2bc2ba1e053fa9488adc15ddb_JaffaCakes118.exe windows:1 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.edata Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE