Static task
static1
Behavioral task
behavioral1
Sample
45d8eb6f8b97fd0015a99bb52ba580d5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
45d8eb6f8b97fd0015a99bb52ba580d5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45d8eb6f8b97fd0015a99bb52ba580d5_JaffaCakes118
-
Size
11KB
-
MD5
45d8eb6f8b97fd0015a99bb52ba580d5
-
SHA1
8949032e2a8bfbfab204ed56e77f4790af0ae8bc
-
SHA256
ba62190bb811c76e818f2e473b776c63f672f2afea9141f7f0f9a0ab09e00105
-
SHA512
c4fd6285bb1674f4af62f7e67d0d2f4adfb6e3cc6ffabec6a3202693e4119cc3325f4d818a28471252ff9d04b43bcb71b77f592bbf9061b37429c8f4ab2923bd
-
SSDEEP
48:6T3Gv1oWqyNfYzaGyh4mjBv7YkpQ/GaJx7YDcUQ7UZBq7:wGNZqyNOnmjR73p8pJxIo4ZQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45d8eb6f8b97fd0015a99bb52ba580d5_JaffaCakes118
Files
-
45d8eb6f8b97fd0015a99bb52ba580d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
75425eba3977a336dc6c3f1c3bcbbf37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ