Static task
static1
Behavioral task
behavioral1
Sample
45b7e30297d7aecfd66e55d6f7c27bea_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
45b7e30297d7aecfd66e55d6f7c27bea_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
45b7e30297d7aecfd66e55d6f7c27bea_JaffaCakes118
-
Size
41KB
-
MD5
45b7e30297d7aecfd66e55d6f7c27bea
-
SHA1
11423b63123e9651abf930da28b75e05950c9553
-
SHA256
2e580c8f7b4525fd435f28d5addae86dfb7241531aa1d9f242186a593c38af1e
-
SHA512
5333a2db899a73aca54207e43c2736c88856de41f1e5b5aff7c64588eb9bb6e4f22e7bb21775daf931719717991e05cb103a4ea493d3d4747bd33d7a9531641d
-
SSDEEP
768:SRpTfA3rA5bvVOJB2m2mcNglimutIt9kuQF5T4LKYhn51IZBc0i68VPnRfBs7IvT:ixA3rA5jIOMli7IkuQ8BlInc3Zn3s7OT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45b7e30297d7aecfd66e55d6f7c27bea_JaffaCakes118
Files
-
45b7e30297d7aecfd66e55d6f7c27bea_JaffaCakes118.exe windows:5 windows x86 arch:x86
7eaeb8de82ab2c893d1195e30cc60321
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
DuplicateToken
Sections
.erof Size: 33KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xif Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lqn Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zsx Size: 1024B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE