Static task
static1
Behavioral task
behavioral1
Sample
45c8c0a6c32a48b9c07f9bca718a0bfc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
45c8c0a6c32a48b9c07f9bca718a0bfc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45c8c0a6c32a48b9c07f9bca718a0bfc_JaffaCakes118
-
Size
1.7MB
-
MD5
45c8c0a6c32a48b9c07f9bca718a0bfc
-
SHA1
bf7907c0bf37d8e6b70cf7b04e3cb8d22aed9b46
-
SHA256
a4edb3a7451f1bcbe38ef1d47bea5319a2427fd77570cd97db5302273bba9697
-
SHA512
bb684b1755e312ca660323aab5c4d2b74896a7962c45259ebd4eac9c169f1197e001cec61faa820973775043014e0164a8391f7e6c37e0a51331b0406630a412
-
SSDEEP
49152:MZVkYpDZUOKZD50NB6ukiTcqm7LGv+pp2r0Xay1cW:apDZUJDmNB7kU9mfGWppi3yD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45c8c0a6c32a48b9c07f9bca718a0bfc_JaffaCakes118
Files
-
45c8c0a6c32a48b9c07f9bca718a0bfc_JaffaCakes118.exe windows:4 windows x86 arch:x86
f3935ffc1cbc97d35421e97e851dff3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
Sections
cpwbujxo Size: 476KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nqkzvuiw Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
weajzshf Size: 1.3MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eprhadie Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE