Static task
static1
Behavioral task
behavioral1
Sample
45bed123d00fac717b6ef68d7238c769_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
45bed123d00fac717b6ef68d7238c769_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45bed123d00fac717b6ef68d7238c769_JaffaCakes118
-
Size
2.4MB
-
MD5
45bed123d00fac717b6ef68d7238c769
-
SHA1
f1cc429f79755aa7510fa489b7fa8f1968ec46b3
-
SHA256
eaa977c26cfb754002d9d382bd563972c541624401e5db6973211a1ebe8b568f
-
SHA512
48cdfa46636d6ac193767e4c87a8a571a096aa1127bc86c4fd171ea148ae1a8295806b5db48a6e8042ab5405aa1089f7c2b08bdfc903b586036ee6e2b6081b49
-
SSDEEP
49152:v9cs8N2nHeOuqBTbZzpw5bZjjxMvOSErQCbYtcRub1iqZ56z:vscHeOuGHtm7jFlSOx0tcI3ZYz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45bed123d00fac717b6ef68d7238c769_JaffaCakes118
Files
-
45bed123d00fac717b6ef68d7238c769_JaffaCakes118.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.4MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 359KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 944KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fyfzsxae Size: 707KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jmoiixkn Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE