Static task
static1
Behavioral task
behavioral1
Sample
45fc236a97e6d32ffb54d461a7eff52e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
45fc236a97e6d32ffb54d461a7eff52e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
45fc236a97e6d32ffb54d461a7eff52e_JaffaCakes118
-
Size
43KB
-
MD5
45fc236a97e6d32ffb54d461a7eff52e
-
SHA1
d4d856992ab949c3bc12291fb00e99a82fc27783
-
SHA256
1c82b350706d26dacf1342f990c4fb88acff1e43260ec094fe88ff844052d38c
-
SHA512
d9bd0e818d39e80c7df899a1cc2f34b255f1176d22295f1f903989df155705cb662ea51dbcebc674bb0873d7aba2ae011e46e4de059ff28b4a01f557dcf735fc
-
SSDEEP
384:GKhBinr0CyBH607jCcS5rwajlz9VjSZd63+jLTPcmpjuR26yyTI+7DN8Sv3JK7wW:GcC2CcUaTkmpj8t8es74sFEA8lI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45fc236a97e6d32ffb54d461a7eff52e_JaffaCakes118
Files
-
45fc236a97e6d32ffb54d461a7eff52e_JaffaCakes118.exe windows:1 windows x86 arch:x86
236918f30602114db8db6c56101b871b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
UnmapViewOfFile
VirtualAlloc
VirtualFree
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ