Static task
static1
Behavioral task
behavioral1
Sample
46f4cc03828187c14ad0512109b9bbce_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46f4cc03828187c14ad0512109b9bbce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46f4cc03828187c14ad0512109b9bbce_JaffaCakes118
-
Size
5KB
-
MD5
46f4cc03828187c14ad0512109b9bbce
-
SHA1
b6f643b153eef2ac84a5a703c6fdecd224192129
-
SHA256
94144bdbfcec98a33cba6c0da9ae5042d58a3ee77b65d4e77fbd366a3bbaa17c
-
SHA512
d8b3223d99dfafd0d1b759d5525a5d230a912f2ea4f0adf273dfd26dba4b289940a8778e20d59efa989b01c33d0fd43dc06f286e85b0cd7b90f966ffd56d74a2
-
SSDEEP
24:OEhu70Uc9/PGoatR2kpqAmTBcRvv87xpMpZZN2lJ10YsEi6aUUtmUUNg0QK:OEPXG7tcdBgvv8NUvCJ10Yqmdg0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46f4cc03828187c14ad0512109b9bbce_JaffaCakes118
Files
-
46f4cc03828187c14ad0512109b9bbce_JaffaCakes118.exe windows:1 windows x86 arch:x86
ae34c05cd079a5f0bd4cc8743d72dbb1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CloseHandle
ExitProcess
CreateProcessA
ReadProcessMemory
SetUnhandledExceptionFilter
WriteProcessMemory
GetModuleHandleA
user32
MessageBoxA
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.LOAD Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE