Static task
static1
Behavioral task
behavioral1
Sample
45baac6013673b868dd7ac58e4c65257_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
45baac6013673b868dd7ac58e4c65257_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45baac6013673b868dd7ac58e4c65257_JaffaCakes118
-
Size
12KB
-
MD5
45baac6013673b868dd7ac58e4c65257
-
SHA1
2e33aec89ad78e86b712920b3121b68951caef18
-
SHA256
5baf03ef673758f501e63fec7b1b9cfe7252408608c768055c4e6b6196ceaac7
-
SHA512
ead18d8c18b2740427e338d3df2d13afa3a72b107943670572b028eaa5045cf4a66d20c65b640cac273ffa5f050c90c6d687525f341ea6c5faf4479a86757989
-
SSDEEP
12:eFGSGw0gIlhbOEsxoc/RdzNhHIY5OuBYjOUS+:eFGS50g8Bsxoc/RZDd9BYjOUP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45baac6013673b868dd7ac58e4c65257_JaffaCakes118
Files
-
45baac6013673b868dd7ac58e4c65257_JaffaCakes118.exe windows:4 windows x86 arch:x86
17a4bd9c95f2898add97f309fc6f9bcd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
Sections
.text Size: 4KB - Virtual size: 262B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code Size: 4KB - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE