Static task
static1
Behavioral task
behavioral1
Sample
46efcdc189d81ebca1dd5ad2e860a907_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46efcdc189d81ebca1dd5ad2e860a907_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46efcdc189d81ebca1dd5ad2e860a907_JaffaCakes118
-
Size
324KB
-
MD5
46efcdc189d81ebca1dd5ad2e860a907
-
SHA1
1e8faf8944b953e84fa91abac2219df19a97c4e7
-
SHA256
ad0a9236f3b3334d6c48c0681cb8eb081ce85be64b236d886de6e32c41ca9ab1
-
SHA512
db8db2b353f51752a8f53f8cab0d36bd771e755437cf713aad1da3a45b9eb805202052cf687f939c0449358d49a6cab976f1c44ff1fac745cebdbefb6dbeef96
-
SSDEEP
6144:g8VYcssJ6qCqMLO4pKXC2M9roAuYgX0rO7VF0Gz4:wcsUcXIxM9rbXIuOz0+4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46efcdc189d81ebca1dd5ad2e860a907_JaffaCakes118
Files
-
46efcdc189d81ebca1dd5ad2e860a907_JaffaCakes118.exe windows:4 windows x86 arch:x86
b63c3388b65deb77f7a61a32dce4f0c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
CompareStringA
GetCurrentProcessId
GetExitCodeProcess
CreateFileA
DeleteFileA
OpenEventA
DeviceIoControl
CreateNamedPipeA
FreeLibrary
user32
SendMessageA
Sections
eBsoyIKy Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
weQCQfYE Size: 4KB - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PdcqWDEn Size: 272KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE