Static task
static1
Behavioral task
behavioral1
Sample
41546bf6ce3916c987a3940443c4e6f8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
41546bf6ce3916c987a3940443c4e6f8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41546bf6ce3916c987a3940443c4e6f8_JaffaCakes118
-
Size
16KB
-
MD5
41546bf6ce3916c987a3940443c4e6f8
-
SHA1
d422f1ef353641aa9a84567490f6a1aa1009a42c
-
SHA256
c6691b1ded96a39166c921f82653567aaaad6019eb97e4b7e85d5244ffa84bc4
-
SHA512
99c2a4e06245a638035424e91a4d1ed7f09d015a19231f4927cf9934b899856708eb94a293139b8f1961a47878dc0b336d9490eb401ae7b1ca8cb3a7f3e6fbae
-
SSDEEP
192:M/gguSUxzYz5Bl+8HaJQxGebypIfY/x6WTLAQkjyFoe4CDx:M/jcxzYTs8HjMeWAYZ6WTieaevl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41546bf6ce3916c987a3940443c4e6f8_JaffaCakes118
Files
-
41546bf6ce3916c987a3940443c4e6f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
198217f39a1b31368681bed82723db34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
ExitProcess
msvcrt
_iob
Sections
Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE