Static task
static1
Behavioral task
behavioral1
Sample
46421ecdde053594dfc0575a106e8d74_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
46421ecdde053594dfc0575a106e8d74_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46421ecdde053594dfc0575a106e8d74_JaffaCakes118
-
Size
47KB
-
MD5
46421ecdde053594dfc0575a106e8d74
-
SHA1
20e3f30749c1b1ff310a8e233d97d57956246a42
-
SHA256
e9e1397d043967d6e7bd7e643bc85c6414adafe44a7964b3f7dd071e912b25e9
-
SHA512
0ade086a68ebf1a232f9f3cc0fdc746e15fd89a0ad7c23fdd51ce601e04c9cd05f0be59b166d02ab7860b9767d3d13b5421dcbaf71dd2b382a44752521948eb7
-
SSDEEP
768:xmSs6sNAnMJKd4+MmXvdy2JFdbp7bJqohFQJpH//ZsODqhe3Ats1z4D7yRJ:ZkumKd4+TXllXIohF2HHZd4eAs4fO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46421ecdde053594dfc0575a106e8d74_JaffaCakes118
Files
-
46421ecdde053594dfc0575a106e8d74_JaffaCakes118.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE