Static task
static1
Behavioral task
behavioral1
Sample
44c39fe1b70070a79fe7f8eea6112f26_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
44c39fe1b70070a79fe7f8eea6112f26_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
44c39fe1b70070a79fe7f8eea6112f26_JaffaCakes118
-
Size
813KB
-
MD5
44c39fe1b70070a79fe7f8eea6112f26
-
SHA1
140b087b74b29dba87ff01d1b61a710cf874903a
-
SHA256
2328dd6da46c9936688df5f806602ec09cc55711f70b551d9cd6e92134bd3fda
-
SHA512
f8e84c8d41f3f0222d26da7565a2191e30c7b17ea6eb0ecfa26d45cf78852b949cccb49d60941b423a1a8a9200ec5b9f3fa0fc06a74bef022a55aa3f0251ba60
-
SSDEEP
12288:UZWtI6RkderQZb+md4w1UieZJys73dOvXDpNjNe8Nunul:UuhaderQZb+md4wmieZJ8NI8L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44c39fe1b70070a79fe7f8eea6112f26_JaffaCakes118
Files
-
44c39fe1b70070a79fe7f8eea6112f26_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ