Static task
static1
Behavioral task
behavioral1
Sample
45b54f78bfe17fbb5d26024f1cc8e80b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
45b54f78bfe17fbb5d26024f1cc8e80b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45b54f78bfe17fbb5d26024f1cc8e80b_JaffaCakes118
-
Size
315KB
-
MD5
45b54f78bfe17fbb5d26024f1cc8e80b
-
SHA1
df635844569a37b8144b8fcf3f368b5a49650049
-
SHA256
7b077557edd8864cfd1e61dd38211d72dfe47e622489036fff28059b9d15c200
-
SHA512
a7906af5e53053c78c6ac5032c905a7d9b69becf744a6f05f64e522bc30ac995958ee2ac4c4680534bb799b3831cedf83b78b062a252c002add2190722587af5
-
SSDEEP
6144:VxMLvcC9jSt5PoKL6vt5+nZFKuI8/YtTPBI8/YtsYGHaX:VxeF9m/PoaY5uZsuqZBqudHS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45b54f78bfe17fbb5d26024f1cc8e80b_JaffaCakes118
Files
-
45b54f78bfe17fbb5d26024f1cc8e80b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Fe00 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Fe01 Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE