Static task
static1
Behavioral task
behavioral1
Sample
745fd07a41099564b360e555ac4c92b6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
745fd07a41099564b360e555ac4c92b6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
745fd07a41099564b360e555ac4c92b6_JaffaCakes118
-
Size
79KB
-
MD5
745fd07a41099564b360e555ac4c92b6
-
SHA1
1751ecad4868f3e48e9043b94c1882d7b0e244e9
-
SHA256
95e2d84849ab9d07a0a08eeebd1663e19b5e1ee6fe9e7093c90bd4791c2c37ad
-
SHA512
fc0eaedc2f9b5c7d6adf0def956c67ca649d23731fc11afcf5c3a70fa0ae615c91be6dadd69d679afef7aabfc0b9b62519fd55fb9ace0a6cc0c85dbb762caa28
-
SSDEEP
1536:+x5L/xG/Rmy3chLCkGTLNpKfVuK9Yig2wQdeqyK1i/4yV9MaY:+nLARGhLCJhpKfVoigZCeqyKJm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 745fd07a41099564b360e555ac4c92b6_JaffaCakes118
Files
-
745fd07a41099564b360e555ac4c92b6_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 63KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE