Static task
static1
Behavioral task
behavioral1
Sample
d48d83cff1fbf57c5c77594cc7c79f8b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d48d83cff1fbf57c5c77594cc7c79f8b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d48d83cff1fbf57c5c77594cc7c79f8b_JaffaCakes118
-
Size
892KB
-
MD5
d48d83cff1fbf57c5c77594cc7c79f8b
-
SHA1
5accbaa9b53752b8671b77276d3ba289a5e4976a
-
SHA256
2ec9d496bd6c8f28ae9a8035afe471a6e0229650aa9f2ca43b26fe9637b9002e
-
SHA512
140d6a2daf6700e7760808d2962038f9879beee9c59cc3f3841182268c6516f316619123cbc19e39b49aba7fa8f0a46c8d7544e375ee1189f8d1bfd02ae73773
-
SSDEEP
12288:TwCXnLquXU99ICej7xrcqPkePh+RvMaBlYJQCe2m9Or:0Fn9pejFMePh+RpBlU69Or
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d48d83cff1fbf57c5c77594cc7c79f8b_JaffaCakes118
Files
-
d48d83cff1fbf57c5c77594cc7c79f8b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 438KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zz Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ