Static task
static1
Behavioral task
behavioral1
Sample
45f14ce87f65fa498c05b3cdfa2dc0aa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
45f14ce87f65fa498c05b3cdfa2dc0aa_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
45f14ce87f65fa498c05b3cdfa2dc0aa_JaffaCakes118
-
Size
236KB
-
MD5
45f14ce87f65fa498c05b3cdfa2dc0aa
-
SHA1
bf984acf13888416ed2343e41e4aad4a48c13b50
-
SHA256
1ef9b236073b89f0a673f4532b615ce48cd1f18dc44695435779365a79323d8e
-
SHA512
e43a9a58c870c03a705ce5157e1d9bd57d15ac153e3db1dd454af620c8749e34349efdd53d902ff063f7ac78b7daf8cc5ee90c63e116467e9e05ec0522bb3968
-
SSDEEP
6144:UQn6LPjPGvdZ8x8oARIxobbdb6hXNMpYvPXog8LGQABGs+:UvLPj4Z1RiGJUXQYvPogGGbs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45f14ce87f65fa498c05b3cdfa2dc0aa_JaffaCakes118
Files
-
45f14ce87f65fa498c05b3cdfa2dc0aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 118KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE