Static task
static1
Behavioral task
behavioral1
Sample
46a3c4d67a8fe956b6e4f8d1cbc9835e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46a3c4d67a8fe956b6e4f8d1cbc9835e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46a3c4d67a8fe956b6e4f8d1cbc9835e_JaffaCakes118
-
Size
1.8MB
-
MD5
46a3c4d67a8fe956b6e4f8d1cbc9835e
-
SHA1
7bb321305f2793cadeb583a1760c31198130b6f0
-
SHA256
d01ddd0b5cd8441f16e645e45696bb6168b481aa3b184268e6d85981ea424c53
-
SHA512
f0d820aa8883b799b4244d273c530d8479088c643b9558c362b33e3dd43f8af0e7321fa77c443abeccc92af38c2df23cc83fcf76c31d4e8a36987e3079900846
-
SSDEEP
24576:CfOAjQ0R/vrHEOviHbtyUn/x7R/94b4Fswk8MFJV+16k5pOF6dqj3LFM04qaVJlf:CfdpvrHEUWtX79CUYvqK6YxiVJl1uX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46a3c4d67a8fe956b6e4f8d1cbc9835e_JaffaCakes118
Files
-
46a3c4d67a8fe956b6e4f8d1cbc9835e_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
CODE Size: 354KB - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE