Static task
static1
Behavioral task
behavioral1
Sample
45293b7e3a3c319f5bc9c834eaac04f9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
45293b7e3a3c319f5bc9c834eaac04f9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
45293b7e3a3c319f5bc9c834eaac04f9_JaffaCakes118
-
Size
308KB
-
MD5
45293b7e3a3c319f5bc9c834eaac04f9
-
SHA1
9d8dea7b0c1a28ab1dbd64755579ad9056b65ac5
-
SHA256
627fe0973733762bc557759d0a05a7627c4899db3ffcce28b828546dcf03d602
-
SHA512
20750dc347f281defb9c7d5d5fd8422f3b1321822f8848a45a164723103aa6d011a4c9cfb9d37e877036e587090d8c4efa3d3c0420404a05ba9650096f7feee5
-
SSDEEP
6144:/xrEmcTGAdTulF59LooSFGz8JqsPW903O6+ZShfCgAZZ:+sFF59L1SFGgJqZ9XShfC/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45293b7e3a3c319f5bc9c834eaac04f9_JaffaCakes118
Files
-
45293b7e3a3c319f5bc9c834eaac04f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE