Static task
static1
Behavioral task
behavioral1
Sample
45841df7cbcf24193c8d7c01fab04888_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
45841df7cbcf24193c8d7c01fab04888_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45841df7cbcf24193c8d7c01fab04888_JaffaCakes118
-
Size
16KB
-
MD5
45841df7cbcf24193c8d7c01fab04888
-
SHA1
43a3092a4d3a34819d7ba82b1cb1136847667120
-
SHA256
6545ba9fb6f6507d0d4473092c4d37c886bd497cbab86eb0654477a1f905d67a
-
SHA512
6060475cb4e3aa2bb7023794ed19fd539a656d72a5787ddbd82530d9d622300e3bad6b347b7c062c3381e4d3a99ff573c6cb5aa396f90abf0f5b3ab43dfdb8e6
-
SSDEEP
384:6+PHoOOYwh+cviRD0WeKSbKZCGtWirWusgNaaSDKIc+xhH2n0:6WIOMh+WiRGK2KHkMnsgIaSbfbHM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45841df7cbcf24193c8d7c01fab04888_JaffaCakes118
Files
-
45841df7cbcf24193c8d7c01fab04888_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d870915cd3d95b0df885669e5e74306
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetModuleFileNameW
GetModuleHandleA
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetTickCount
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ