Static task
static1
Behavioral task
behavioral1
Sample
48e9df39077ef5f8fd39010edfe244af_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
48e9df39077ef5f8fd39010edfe244af_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48e9df39077ef5f8fd39010edfe244af_JaffaCakes118
-
Size
2KB
-
MD5
48e9df39077ef5f8fd39010edfe244af
-
SHA1
0bb89ab92ffd53b9755291e292b848010a84c8a7
-
SHA256
e6af9ee5aa5a685f5462d5dfcb06d4965bf052174438ffa5a020735313697436
-
SHA512
91d378d6d906a47b66132cdced7ce82edec1e45acda4c9607819613256caf1c95928dbe354dcb5280d0db605c8a7a1a10ad7fdb0aa29fbdee0dd180e020b803a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48e9df39077ef5f8fd39010edfe244af_JaffaCakes118
Files
-
48e9df39077ef5f8fd39010edfe244af_JaffaCakes118.exe windows:4 windows x86 arch:x86
9847cbf6b10ee76499cda6ac94be76df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
ExitProcess
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ