Static task
static1
Behavioral task
behavioral1
Sample
46c5f2c7486fa7a949eae5a6a3f8be8e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
46c5f2c7486fa7a949eae5a6a3f8be8e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46c5f2c7486fa7a949eae5a6a3f8be8e_JaffaCakes118
-
Size
50KB
-
MD5
46c5f2c7486fa7a949eae5a6a3f8be8e
-
SHA1
e5f3460f5bc57649598f632580776e293e231aeb
-
SHA256
5dd2362be113362dd1c08cf385a2296ca6976e850c42e6192cb41c0356ebf23b
-
SHA512
b5c8bdcf630d7397a601bb032afbf188683cb8e44911cb7de784d39ca3fe1dcd970c7ed33b2e2b622ebc16f792b81f14ff78a6079ff33cfe73c5913d480ee768
-
SSDEEP
768:nxa5Eo2kNsT/bp4h51mYn2FcKTDvxLegFQBmMHg/2q5qQbpnD9HI4Xubx+ha5A:8rzNGpEyYScKTjI6MZg/v5LpD9HImR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46c5f2c7486fa7a949eae5a6a3f8be8e_JaffaCakes118
Files
-
46c5f2c7486fa7a949eae5a6a3f8be8e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE