Static task
static1
Behavioral task
behavioral1
Sample
46b1bb31b053a12d30fa68a483a0169a_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
46b1bb31b053a12d30fa68a483a0169a_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
46b1bb31b053a12d30fa68a483a0169a_JaffaCakes118
-
Size
33KB
-
MD5
46b1bb31b053a12d30fa68a483a0169a
-
SHA1
b0b5acb9563ba57b481fd4d219aa2f6c4c4030d7
-
SHA256
d1e71e9eb7af7c13949412a39c1ccca7259596fdd0025b68eddea96d6c63bcdf
-
SHA512
0b6b91964626775c017021e96c36ffab0a722f58f28202e51a2c70c2d9f98291758109d98c3f0bfb2b18252560f5ab68ff71a6dfa72ae0878e879ea5ab3d1a8f
-
SSDEEP
384:pjp/uSk8NKRsdYb/ttE2lt83es9HlJC+H8p8gmsF5LTRS/ypFl3PSD8N8v57mk:pjpj7Yb/Ou+Wp8gF5Lo/ynl3PU8N8r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46b1bb31b053a12d30fa68a483a0169a_JaffaCakes118
Files
-
46b1bb31b053a12d30fa68a483a0169a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ