Static task
static1
Behavioral task
behavioral1
Sample
b48842c111e02be0d7f1a2b2529f11ee_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b48842c111e02be0d7f1a2b2529f11ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b48842c111e02be0d7f1a2b2529f11ee_JaffaCakes118
-
Size
314KB
-
MD5
b48842c111e02be0d7f1a2b2529f11ee
-
SHA1
26a18ee46daecd44680e1496bc8165eb95139c27
-
SHA256
9533045111f67cfa90480abe613681f03bcec802c4b1e98cdee6cb24198fb97d
-
SHA512
6be8f31091a3ed82db318e416426eb355883c1ff3e925c80de646f25f2febb616d3f9a1716dbe2638c3b9e85971bd62e0cb6f5ec91f91762ffbd6941e7942b10
-
SSDEEP
6144:IX8KbyYgz2a6QzKUd9IeAF48b8vgDHA5eOh9nEBH7MV90DrPul2/l:K8KbyYgzl6QzKUdM48wvZ8zuQl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b48842c111e02be0d7f1a2b2529f11ee_JaffaCakes118
Files
-
b48842c111e02be0d7f1a2b2529f11ee_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 361KB - Virtual size: 361KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ