Static task
static1
Behavioral task
behavioral1
Sample
b46a39a612a1f109743a7a0d048c4c78_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b46a39a612a1f109743a7a0d048c4c78_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b46a39a612a1f109743a7a0d048c4c78_JaffaCakes118
-
Size
338KB
-
MD5
b46a39a612a1f109743a7a0d048c4c78
-
SHA1
7ee520abad85e603ab3c019e166061719c7face1
-
SHA256
d258b6b16cd90b52e7c62318f3589880f8ed640ee15e3f8d22e2299674f5ee7a
-
SHA512
c47771b29e4a95afcc8a9a2d8af8af070427011ef1d82e67c723e8942a5a0ae139ff720c94ce72e5f1e2681123b1c494d4ef9aec3d47ea8c8d164f036b536551
-
SSDEEP
6144:4lpJcHlRhxmQqFb+Wa1uqnRFcCevwUverfJUcjaBUH74lN:OpCHFIVa4OavwjrBUcjaBfN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b46a39a612a1f109743a7a0d048c4c78_JaffaCakes118
Files
-
b46a39a612a1f109743a7a0d048c4c78_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.1234 Size: - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2345 Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3456 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4567 Size: 298KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5678 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE