Static task
static1
Behavioral task
behavioral1
Sample
45347b01bf794d3fddc5573626cde0b4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
45347b01bf794d3fddc5573626cde0b4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45347b01bf794d3fddc5573626cde0b4_JaffaCakes118
-
Size
59KB
-
MD5
45347b01bf794d3fddc5573626cde0b4
-
SHA1
19b06d4d8cc14a1d67bd0f494b55275a02de62a4
-
SHA256
cc80127cab65fe2a937b6252f09062d1359c62ca7928613b6113e4a80ca8c05b
-
SHA512
bc10bb6665461b08aec6564613d92808e81f8e032d2e4ac0beb72d8bdf64d8cb5c3ef5ee3548a7057c0d8a209425d1fbc2b0a6c26d2be10afb86fbd9aca4b5f6
-
SSDEEP
768:f5SiFCxdt1zzBP4Eu6lcTILlybMNZQn9w5YjSEoaxc:f9CH7zJPu6/LlE0Qn90Yjga
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45347b01bf794d3fddc5573626cde0b4_JaffaCakes118
Files
-
45347b01bf794d3fddc5573626cde0b4_JaffaCakes118.exe windows:57950 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
jaaariza Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rrrziiir Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rqyrabrr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ararqqjy Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ