Static task
static1
Behavioral task
behavioral1
Sample
f46adf6cfe76fda0d879d0e16d8aec95_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f46adf6cfe76fda0d879d0e16d8aec95_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f46adf6cfe76fda0d879d0e16d8aec95_JaffaCakes118
-
Size
1.1MB
-
MD5
f46adf6cfe76fda0d879d0e16d8aec95
-
SHA1
8318b3ff514a6c48b713c885b913cd5ac2599d64
-
SHA256
2b6b8f9608123c8177ba3f730bce248deb95e190c978649c91da2d75db49b92f
-
SHA512
0f23a7a4c0fe9a9a3b6b66e23621c25d46a3afc57354e6838c5d74f914b10eff98cda67f0e1781e2261e042fa081332821515228fc31074fa4c90b70a59544e3
-
SSDEEP
24576:9ClXWrGoqEGgMwK5+0UigR1AzzRXfhAQxsTwBc:4dWNn++hRKzFXfhAZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f46adf6cfe76fda0d879d0e16d8aec95_JaffaCakes118
Files
-
f46adf6cfe76fda0d879d0e16d8aec95_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1244 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE