Static task
static1
Behavioral task
behavioral1
Sample
e48cb72b16cbffb605551ad83f758702_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e48cb72b16cbffb605551ad83f758702_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e48cb72b16cbffb605551ad83f758702_JaffaCakes118
-
Size
29KB
-
MD5
e48cb72b16cbffb605551ad83f758702
-
SHA1
afe6a611cad5418fd7c48d1496ef0762c4254d70
-
SHA256
e28411bab38e50003e33fc22b0a3ef99dda6489994f76089d8e392b905c3e447
-
SHA512
8dd1ee54eebb4a09c2627129233792fdc7b71464d5caa5070dc61c83e7c832e3f2a19732c59764976c2da8ad6ad138ce997e85eddd9146d5e38e9139e99bca85
-
SSDEEP
768:DLe/oQbI8MykvfC9TXiPw7pQb1PLBVCs56ZfNUs+MXA:DCzUykvGpAVBhyMMXA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e48cb72b16cbffb605551ad83f758702_JaffaCakes118
Files
-
e48cb72b16cbffb605551ad83f758702_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 25KB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE