Static task
static1
Behavioral task
behavioral1
Sample
46559007b2e92a688496f2234269def5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
46559007b2e92a688496f2234269def5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46559007b2e92a688496f2234269def5_JaffaCakes118
-
Size
446KB
-
MD5
46559007b2e92a688496f2234269def5
-
SHA1
50a99d84246842ab7d89bc37fe571d22ff9d6844
-
SHA256
0da73f4e86483d3a4d8ba8506daa63ef912410793c90c601f4c7cbe8e9ed7a81
-
SHA512
35f2276ff0ec499fab21789b2822346c3167323e1749ada16c5faa527d623772daf14cf33a669ad0d0a4908b032e29720f84fd4637118efe5bcf2ad7cf206faa
-
SSDEEP
6144:c9fjvQWOXtPlElMWvVFqJkBF6DdXDsn+B8+4GOYhtR43b4zb78eXLpop/86ZFOl9:SQWClElMgPq9z2GOwE8bIIEk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46559007b2e92a688496f2234269def5_JaffaCakes118
Files
-
46559007b2e92a688496f2234269def5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 377KB - Virtual size: 377KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ