Static task
static1
Behavioral task
behavioral1
Sample
48e47daa4d5b8b51989b86a881b3bf92_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48e47daa4d5b8b51989b86a881b3bf92_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48e47daa4d5b8b51989b86a881b3bf92_JaffaCakes118
-
Size
281KB
-
MD5
48e47daa4d5b8b51989b86a881b3bf92
-
SHA1
0ec302117eb9959f4c347a95dc8984623b7c0fda
-
SHA256
fc0772a35ab785393159fbb315d232fbc38d39b77b35bd9bd22c4efe27d1ff6e
-
SHA512
82dbb1200f1ba2020fae132d549d07df55258d57c0338969c061d4ff81b8435f8f98c69a91fd72b387a836e673dddd1b6848bd40a6dec007ba0fe003e4f17c88
-
SSDEEP
6144:x6dndfLAFLPJZ1fICOQNFeY/IjMAW02FoQsoKGQO1DrLNV:xmkd70Y/Ij80ooQsbO1RV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48e47daa4d5b8b51989b86a881b3bf92_JaffaCakes118
Files
-
48e47daa4d5b8b51989b86a881b3bf92_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 253KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE