Static task
static1
Behavioral task
behavioral1
Sample
b48e6f474209080073cd528c616435b9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b48e6f474209080073cd528c616435b9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b48e6f474209080073cd528c616435b9_JaffaCakes118
-
Size
16KB
-
MD5
b48e6f474209080073cd528c616435b9
-
SHA1
3298ec8e36b24f6a98a5390abde8c959f15b16e4
-
SHA256
798d9e2c826ee606df0d22936423dbe5524d7da343e88b4ce09714471fea0628
-
SHA512
d49ce17fe023684fe0f4aac58f735b98196376ec8e4b4f519f3b6d3b01ddd5bc1f19ea12e84abe06b90118c223303188937736d4a409e00139f227fadd5c8bda
-
SSDEEP
384:mL6kJtJxWOu+WtFPcvcQsRMtdMLaSxg54V6eZQgy:mL7LJzu5EeRM+aSxg5I6eby
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b48e6f474209080073cd528c616435b9_JaffaCakes118
Files
-
b48e6f474209080073cd528c616435b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
330ae68fd35ae99521a0ac6a1fd9b999
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
Sections
.text Size: 10KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ