Static task
static1
Behavioral task
behavioral1
Sample
45e5f11276817fc22ede5c3d1eb96265_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
45e5f11276817fc22ede5c3d1eb96265_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
45e5f11276817fc22ede5c3d1eb96265_JaffaCakes118
-
Size
140KB
-
MD5
45e5f11276817fc22ede5c3d1eb96265
-
SHA1
a8cc6e64b56d01c15d54d69d7d5940a7364267f2
-
SHA256
0fb2094497f586c22bff3464d37d623eaefc20f86a66474ed3ef9a80952144a8
-
SHA512
d956eb7132d1b3bc6357f7a1cea202381da2c875a9c23aaaba98c43782af01ddc648fa6b6762e27f8835e3ac8eab7535a3aa276f38f447963a1009952d0f022e
-
SSDEEP
3072:RxJyZiPFvBP+Tza0RARcfz9Ae+FNjOE/CEKydJqKcVly:RxJprPuzaQARcfBARFNjOBEKydJgV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45e5f11276817fc22ede5c3d1eb96265_JaffaCakes118
Files
-
45e5f11276817fc22ede5c3d1eb96265_JaffaCakes118.exe windows:6 windows x86 arch:x86
6d74b7944e11d95461d5951b9a9971ca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ChangeWindowMessageFilter
IsWindowEnabled
GetMessagePos
GetActiveWindow
shlwapi
ord29
advapi32
IsTokenRestricted
winscard
SCardListReadersA
kernel32
GetSystemDefaultUILanguage
GetHandleInformation
CloseHandle
GetExitCodeProcess
GetCurrentThread
GetCommandLineW
GetCurrentProcess
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 750B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Ol Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt1 Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt0 Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ