Static task
static1
Behavioral task
behavioral1
Sample
45dabab48d378f50b448c9e45d49db50_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
45dabab48d378f50b448c9e45d49db50_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45dabab48d378f50b448c9e45d49db50_JaffaCakes118
-
Size
23KB
-
MD5
45dabab48d378f50b448c9e45d49db50
-
SHA1
2cecbe5716b6d3858d921f6a64d1bee40fc025ae
-
SHA256
a8ee24896b4ebdd51a22241a9aebbb938300946aaf5e8c118b7c6a35aa25a026
-
SHA512
6721f3128ff6fa6c7b8af4ee41772e40f1949fbef8781a55901cd699f6f1426b6fee99612a8384e5dc2f7eab6a9444e335fbd3214ec3caace7580b9d762901fa
-
SSDEEP
384:s/me8zdTyBsyqAIZhgFryTAawrVF/aOnl+An1anB4rJ6BMldzSbM3nI:ZWsyqAgghdawZZQIanBwwil42nI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45dabab48d378f50b448c9e45d49db50_JaffaCakes118
Files
-
45dabab48d378f50b448c9e45d49db50_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE