Static task
static1
Behavioral task
behavioral1
Sample
45fb64a6587042cdfc4b5aa4984f6432_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
45fb64a6587042cdfc4b5aa4984f6432_JaffaCakes118
-
Size
103KB
-
MD5
45fb64a6587042cdfc4b5aa4984f6432
-
SHA1
4f76d83eec9c81d3d3b0353e314cefe051e918a5
-
SHA256
6b03df8c71d586104a2497e78f8f0c3c3320d9038b414dcdfadd5afdc5b81aa2
-
SHA512
9eac0efc11ef07051946e9b64402f47c26fedcba230a17eebe3e4916493b7b1dd8949bf9e9838f818cc535400ff59d75133a451793c9c8a269b96bcdb47a10f3
-
SSDEEP
1536:Sgycpxiu0050Kq7u5TbTwWThIiyrb4Q6aA3QfO1ShDtdY28aXUK6Xz91YZqFcGss:H7Z0e0KUcTbcOhR9Q6aHh7hkVxJSQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45fb64a6587042cdfc4b5aa4984f6432_JaffaCakes118
Files
-
45fb64a6587042cdfc4b5aa4984f6432_JaffaCakes118.exe windows:4 windows x86 arch:x86
d8830768e26d5542e5a19dad95d6bbc7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
ExitProcess
user32
FindWindowA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE