Static task
static1
Behavioral task
behavioral1
Sample
3046ea160ee5217e8a6b8f9d8494ebf5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3046ea160ee5217e8a6b8f9d8494ebf5_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3046ea160ee5217e8a6b8f9d8494ebf5_JaffaCakes118
-
Size
7KB
-
MD5
3046ea160ee5217e8a6b8f9d8494ebf5
-
SHA1
8d49dc0b500385b217828e6946c150a5c15876c4
-
SHA256
c4e5ccaf760ed212fecc82f674af65a13bd616ca71b4d6cd182f0ebe14c1dbfd
-
SHA512
a6fc346bfc98206672751e46bc03c5e7d3e44028c72fc7325525015c3323688c548bcc1764fe6c963a8751e936e4cffdaad822348d61ac23451d5138b0e01900
-
SSDEEP
192:Uk2u1Z/9L3q0AVG1pj2OlF9GK9cW/ymp7H6iA25DCD/:UtKA0AVGLaXK9dqU7H6p25uD/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3046ea160ee5217e8a6b8f9d8494ebf5_JaffaCakes118
Files
-
3046ea160ee5217e8a6b8f9d8494ebf5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.iat Size: 1024B - Virtual size: 785B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 24KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ