Static task
static1
Behavioral task
behavioral1
Sample
f44b80c50bbc6a660f31219e45e3a7d3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f44b80c50bbc6a660f31219e45e3a7d3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f44b80c50bbc6a660f31219e45e3a7d3_JaffaCakes118
-
Size
483KB
-
MD5
f44b80c50bbc6a660f31219e45e3a7d3
-
SHA1
d6d3a6b19d6b2196a24c4c6061ad196273c01ed4
-
SHA256
00aa6a634e5d4d6fc94985fc070a936dce39f78bea2aca0ed350f509ce7a0391
-
SHA512
942bc605af0c03cb29216ef6f317295aebb9197c0fad8cf29011c2190e0cc5364d5d89d65c3d3b7ed2d9241482d2f1f646fdde6da21606e0a558ac2ce1fc23bf
-
SSDEEP
6144:UZfec9EbXDk6RkdKU/UOPSe570Szp3Znmy+g4VrG1VVE+IwrG1VVE+I5E2E4:UZWtI6RkqOB06KunuV4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f44b80c50bbc6a660f31219e45e3a7d3_JaffaCakes118
Files
-
f44b80c50bbc6a660f31219e45e3a7d3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ