Static task
static1
Behavioral task
behavioral1
Sample
46eed2d141423a342d3c4ec23f1beea1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46eed2d141423a342d3c4ec23f1beea1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46eed2d141423a342d3c4ec23f1beea1_JaffaCakes118
-
Size
458KB
-
MD5
46eed2d141423a342d3c4ec23f1beea1
-
SHA1
7d5bbf145d4e6d96a1d033044d3d91b839f3d423
-
SHA256
959548e0378a400e742bb8e79ee3b6d81dbb99b456ca13792307a49bdd158dfe
-
SHA512
638a298a8ba87307f5ee3199031ac40b2ad96a328e73d58625c2f2665bc6155912e58bbcb048fec82dd9a1b03ab414cb8e7aef54f8a09c8a0f5d547f8b77f81c
-
SSDEEP
12288:PIDTgu6b7MP+Dd2gVRRATxnPMG6b7MP+Dd2OEo6b7MP+Dd241:ADk/7MP+h2qRuqn7MP+h237MP+h24
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46eed2d141423a342d3c4ec23f1beea1_JaffaCakes118
Files
-
46eed2d141423a342d3c4ec23f1beea1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 46KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gogoloa Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE