Static task
static1
Behavioral task
behavioral1
Sample
d46c9746cc7ca93cd14429e2015d4812_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d46c9746cc7ca93cd14429e2015d4812_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d46c9746cc7ca93cd14429e2015d4812_JaffaCakes118
-
Size
263KB
-
MD5
d46c9746cc7ca93cd14429e2015d4812
-
SHA1
8ab4510357a49e5bec1b307cc5b43287726df58d
-
SHA256
96d2e94f0713e39fd1e8ac1b1dbaacc88ac47d4668da3850b1f75fb597d7d7bd
-
SHA512
0a0e86e87fb49fa19ee36dac53bbe26c150c84a6690e54d15663ec7909b94901873a21e6723d8797a218fcd295d7d84e1a80de320d64f8b9324d78430b5b3da4
-
SSDEEP
6144:bt0+pGPt+bJI/NAbk96bDMe2mqVzNudSNbzaI:btvm/NAI96P499hBW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d46c9746cc7ca93cd14429e2015d4812_JaffaCakes118
Files
-
d46c9746cc7ca93cd14429e2015d4812_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Shield Size: 512B - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Shield Size: 97KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hhqg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE