Static task
static1
Behavioral task
behavioral1
Sample
46064d384828b9962bf6cd1ea0bea897_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46064d384828b9962bf6cd1ea0bea897_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46064d384828b9962bf6cd1ea0bea897_JaffaCakes118
-
Size
112KB
-
MD5
46064d384828b9962bf6cd1ea0bea897
-
SHA1
0c483217efa019fe6f41fa24c121d3c73c109b8c
-
SHA256
96158762a5f941ba3c62713e31909cca85043898feebb99e8b03d0f1771b4b68
-
SHA512
b975a5fa492e0484fbc95328bd92c0fb248c5dfda8839b7cf805f1c90ef71e58cbb2050221e6540296531e997ac1c3161733ce484e6f0ce9ccbaddf80dc65341
-
SSDEEP
3072:Mq4CHi+/YGLNvF/zPqkcKgT3N08c8G5q5:9BHi+/BNskc/TO8c8+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46064d384828b9962bf6cd1ea0bea897_JaffaCakes118
Files
-
46064d384828b9962bf6cd1ea0bea897_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Lovely Size: 76KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Lovely Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Lovely Size: 8KB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Lovely Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Lovely Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Sara Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE