Static task
static1
Behavioral task
behavioral1
Sample
0c48b64d4d894729f85f6b3b600eb34a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c48b64d4d894729f85f6b3b600eb34a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c48b64d4d894729f85f6b3b600eb34a_JaffaCakes118
-
Size
60KB
-
MD5
0c48b64d4d894729f85f6b3b600eb34a
-
SHA1
4089e23eeb8d1175ba47a42717e7bb5fff7e5aac
-
SHA256
1adeb5c865540bce799603d9c8cc42978dc8abd061041d37ec5dcdff20e5d9fa
-
SHA512
d7a0e5ca9cbc786218c39c9e12bee49f731b41fad9a9de2fc98a18f172a22dd50d164921f103d12f4f94897aeb0578f2197994233c0f9715ec8f9fea31774ddd
-
SSDEEP
1536:aAW8QWnDyM1NMyDCem1hnIRGY7XgPyIE6h:3WyT1Nb6aT70Th
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c48b64d4d894729f85f6b3b600eb34a_JaffaCakes118
Files
-
0c48b64d4d894729f85f6b3b600eb34a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE