Static task
static1
Behavioral task
behavioral1
Sample
744a48d52791db044d1bdb91fb1f3f44_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
744a48d52791db044d1bdb91fb1f3f44_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
744a48d52791db044d1bdb91fb1f3f44_JaffaCakes118
-
Size
9KB
-
MD5
744a48d52791db044d1bdb91fb1f3f44
-
SHA1
702987297dc338594c13ab52528c153b90722726
-
SHA256
e44e11d8e57c8375ee7ea49a0d1372bd249b4fcededb68a9b44970bf232a7788
-
SHA512
3bc0070a86d96189fdcd7f28b21768409cac9030f435b31a359339c852b26343853338e37c08fe2665ef2328459a5ac7a0f3faace2847369e240fb6cf138bd02
-
SSDEEP
96:GgqORLEo1wQBzlPXe7NsZx4qznJbkeyIwZejH+hn4563byJlsRwQsOB:GYQoioXe7yxXb+Z3nvLyURRfB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 744a48d52791db044d1bdb91fb1f3f44_JaffaCakes118
Files
-
744a48d52791db044d1bdb91fb1f3f44_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ