Static task
static1
Behavioral task
behavioral1
Sample
945ba40a3042b0362d7b339060263c0c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
945ba40a3042b0362d7b339060263c0c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
945ba40a3042b0362d7b339060263c0c_JaffaCakes118
-
Size
89KB
-
MD5
945ba40a3042b0362d7b339060263c0c
-
SHA1
ca4ed13766f7bf89d6dfed30cd5e80e82d52bbcb
-
SHA256
6c3802fe9a31192a6d385dfd8bb95dcd614dcb3c5b8bd3648d78007dc9084e54
-
SHA512
ceb778898df48f672a0ae7ec9b86fe016d84f804993f9cbf51ab882b6d2bea4fe0239ed9077c3a389c6538bf9b963e3f98aa96e85dfab84703ac20dd216973d2
-
SSDEEP
1536:S4JApD8G8BwDnbeLHGReip1VfkklphLS5df+3iynmB5Jhxb:S4Jo8GxCqR5p1VfXQ5dSdnmB5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 945ba40a3042b0362d7b339060263c0c_JaffaCakes118
Files
-
945ba40a3042b0362d7b339060263c0c_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
.text Size: 86KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ