Static task
static1
Behavioral task
behavioral1
Sample
45c8c55e49505a78d95209b65d1c4bf6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
45c8c55e49505a78d95209b65d1c4bf6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
45c8c55e49505a78d95209b65d1c4bf6_JaffaCakes118
-
Size
47KB
-
MD5
45c8c55e49505a78d95209b65d1c4bf6
-
SHA1
26cd9ce58ac53cb40ceb3c84b314eb3f276b87d0
-
SHA256
7bd2077fe9409f9bd29d82c4ca12d64fc6695e6bff0407b09a7b994386114c7f
-
SHA512
2e07aa032d271a09d83c3b75a574587d94f7bcc22cf97618dcde4fa63b9954bc5d90044f0baee1925ba2f335aaa2164c0aff2578543ec8599362e107c2016393
-
SSDEEP
768:rLMMffY7CEOu+hIMweYDNFhdNzGBA3n9rmJ7t2+ubW/u67OzzTf6bLbo+8duSGLL:rLMMfCpOuTvDzNzGB04LQb67YzTas9Hd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45c8c55e49505a78d95209b65d1c4bf6_JaffaCakes118
Files
-
45c8c55e49505a78d95209b65d1c4bf6_JaffaCakes118.exe windows:4 windows x86 arch:x86
37f3cd05a4ed0aa309b2569719cfa873
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
wininet
InternetReadFile
Sections
CODE Size: 42KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE