Static task
static1
Behavioral task
behavioral1
Sample
46c6a424099b1d10aec917b009f5e787_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46c6a424099b1d10aec917b009f5e787_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46c6a424099b1d10aec917b009f5e787_JaffaCakes118
-
Size
96KB
-
MD5
46c6a424099b1d10aec917b009f5e787
-
SHA1
7ebd2a1d62ed57e095eac711d4f1e3bffd6b8498
-
SHA256
373e4ef2fe4687b97b69ec8ca3800264e4bc8d9457057366e40c12951d858103
-
SHA512
94e5ffc3dab0570d5530f7575249b3a5aa4e1b4224347a4f5aae183ed98333ecc50db7dcb6a8f1f69b923b10b9b599d557e93bbb96df5b964163a88cbdb5d867
-
SSDEEP
1536:N/6gml6F3Y5H/kjDEmDLhy4yF5O8Jpzwo29oUO9NX2cbeqUi4BMQRIMj/N6:N/boq3cODLc4yF5vzwCUO9NX2iRUi4TN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46c6a424099b1d10aec917b009f5e787_JaffaCakes118
Files
-
46c6a424099b1d10aec917b009f5e787_JaffaCakes118.exe windows:4 windows x86 arch:x86
64f969731bc6e72fcf5537d8f705ffb7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
CloseHandle
GetStringTypeExA
Module32First
CreateIoCompletionPort
FindNextVolumeMountPointA
SetNamedPipeHandleState
GetExitCodeProcess
GetFileInformationByHandle
GlobalFlags
LocalFileTimeToFileTime
VirtualLock
CloseHandle
TlsAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess
GetConsoleInputExeNameA
LocalLock
PeekNamedPipe
CreateIoCompletionPort
FindVolumeClose
FlushInstructionCache
SetPriorityClass
GlobalSize
MultiByteToWideChar
SetLocaleInfoA
GetConsoleCommandHistoryLengthA
GetConsoleMode
GetDefaultCommConfigA
CreateDirectoryExA
CloseConsoleHandle
ConvertThreadToFiber
WaitForSingleObjectEx
Sections
.itext Size: 4KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.date Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
WEIJUNLI Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA