Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_45c36881943a23aad24b6ebeab37f5d2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_45c36881943a23aad24b6ebeab37f5d2.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_45c36881943a23aad24b6ebeab37f5d2
-
Size
2.8MB
-
MD5
45c36881943a23aad24b6ebeab37f5d2
-
SHA1
bfc38bce2872923cd4e340bf06f712e0ba077e28
-
SHA256
4cb0be512595fe207faaebf0d32b18642469166c93bafcb3d1e46db5dba11429
-
SHA512
c3632670f00b6e3d5fe0e27425c9f9106c499e11a5a7b2793e4b5b4aeb960c0a608735c63042b58f7d5f69550f8e431fff6dd521159e3d30a10e1429acce3719
-
SSDEEP
12288:DMMm4cth02Ii8znbax/E0ur6m11IsXvc5n5AihxTE2fG:
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_45c36881943a23aad24b6ebeab37f5d2
Files
-
JaffaCakes118_45c36881943a23aad24b6ebeab37f5d2.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ