Static task
static1
Behavioral task
behavioral1
Sample
46ea5aaf4ed761d3989c697885737bf5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46ea5aaf4ed761d3989c697885737bf5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46ea5aaf4ed761d3989c697885737bf5_JaffaCakes118
-
Size
50KB
-
MD5
46ea5aaf4ed761d3989c697885737bf5
-
SHA1
d3e7e6ace635b5f6ab83b2a0416a076b080649f8
-
SHA256
9def20f568e16e422842a77f6fa1dadafb350413ca8a4c096522cb3422a6d9a1
-
SHA512
a5792eae5f23f9c4be0b126119e046cf3b50821bef3abd1b89966c8d9d992429955c2b0dd9c6f15dafde4048feaa0e6b5d9e56b358db0047451f7d46e6a9032b
-
SSDEEP
768:hUjKVjl9xw3x6nz7vj1wrQu+77QoeaUdTwEsW5oa5RbXNQvkyuDnQW0PbK2:hUKJ3zzj1w1U7ixTwW5l5pNW2Yf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46ea5aaf4ed761d3989c697885737bf5_JaffaCakes118
Files
-
46ea5aaf4ed761d3989c697885737bf5_JaffaCakes118.exe windows:4 windows x86 arch:x86
28c6ef1128d2dc0d513ddf64919b7716
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ