Static task
static1
Behavioral task
behavioral1
Sample
46d144b64dc518fd0e0c7f40a1a5b172_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
46d144b64dc518fd0e0c7f40a1a5b172_JaffaCakes118
-
Size
2.9MB
-
MD5
46d144b64dc518fd0e0c7f40a1a5b172
-
SHA1
8ba0ca9bafc3c94c127fb92c702ba8867047f7a0
-
SHA256
e96f4978f01ec498a9b20c79eab3b4fb13f4a0d8b36e6c6ac486632aaaba064a
-
SHA512
0b97d5a2253289616bedb7679c22a5204365ae5f36df9043ac31781445c28b2361c540757100156126d0ee244533daa89471266be2e02267c4d5fc729f9e4072
-
SSDEEP
49152:sgdHcvx0oS96QYyactF8TZuC2OKc+nc6h20c1D+a88B2xa130y8qkBX9u4fwYfix:sgoQcFctYuFOKc+nc6h5Wx8c1Bknjlfq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46d144b64dc518fd0e0c7f40a1a5b172_JaffaCakes118
Files
-
46d144b64dc518fd0e0c7f40a1a5b172_JaffaCakes118.exe windows:4 windows x86 arch:x86
35a9e9974c673669c35cafffdf20e1bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCurrentThreadId
Sections
Size: 314KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edgnyeal Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rszaettv Size: 323KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE