Static task
static1
Behavioral task
behavioral1
Sample
45e0bcd175b78231c85dfd8a3ada7fa7_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
45e0bcd175b78231c85dfd8a3ada7fa7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
45e0bcd175b78231c85dfd8a3ada7fa7_JaffaCakes118
-
Size
8KB
-
MD5
45e0bcd175b78231c85dfd8a3ada7fa7
-
SHA1
eb9288a0d3a4a8fff644739a1dcb0a8bd3e68472
-
SHA256
73d69328114aa450a4a8b3fab1dab96e4c31798484e52d948effa125664deb8c
-
SHA512
a33679a758a982bab1b6a47885ddf76317fc887b418ba27b0867d1ff8aa4cba3731bc54a3d4dea16366d252d2cffece16652792c61a4cf973cf804e6d49ceaa3
-
SSDEEP
96:2M/PMm1N2r+l4BR1djORs65D76YDWUdOgXXebviTCK1DsvCIRAxvU5kRBnV5T6dK:BMsN2r+l4GVD7dWCXObvGDsvPKZRSab
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45e0bcd175b78231c85dfd8a3ada7fa7_JaffaCakes118
Files
-
45e0bcd175b78231c85dfd8a3ada7fa7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 604KB - Virtual size: 603KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 237KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ