Static task
static1
Behavioral task
behavioral1
Sample
1b46e40377915ded6adbac1b3899b9e3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b46e40377915ded6adbac1b3899b9e3_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1b46e40377915ded6adbac1b3899b9e3_JaffaCakes118
-
Size
77KB
-
MD5
1b46e40377915ded6adbac1b3899b9e3
-
SHA1
3ab0efe07d71a441598ed12134daa925ee2953e2
-
SHA256
cc60bbeeb3440b6f02e02b0eb48354137e8763acf34e7aad062e8465097f8473
-
SHA512
466a463d9868de23ef116868521e1c45214fc9af58bd9d4eb90b128525fb57cade5125ac480ce5a589449dfb4a68d594390d7b29c0eec51719190ef27eae3d60
-
SSDEEP
1536:/RSCBep0u18Wk4ECAs/PQ26F12FYvYcgby6279E/lU4d8AH:JSCBep0u1Bk4EtoPQ2ZY/g2P79ElU4d1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b46e40377915ded6adbac1b3899b9e3_JaffaCakes118
Files
-
1b46e40377915ded6adbac1b3899b9e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
.text Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PROTEQ00 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE