Static task
static1
Behavioral task
behavioral1
Sample
44040bd01e8b8e4ce0b38f5351b5f794_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
44040bd01e8b8e4ce0b38f5351b5f794_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44040bd01e8b8e4ce0b38f5351b5f794_JaffaCakes118
-
Size
28KB
-
MD5
44040bd01e8b8e4ce0b38f5351b5f794
-
SHA1
de975c6fc65a3b2855cacc05a9c6b117e7534aa6
-
SHA256
69c3a904aff76b96e1b4b18fa292ab90baa24fd405945dcdd88a25cae72f01d2
-
SHA512
1ea4a9b08534bad39cf48a59782b20c4698281bb6c3362951450c974880beb069ab2f85f33d70a6432e4be45921ff02cc013e3d422c393f9aa606acb66e62dd0
-
SSDEEP
384:1XyAFd9ky3T8JnFf8ohNmMqV0xpp7UhuMPid2xwD27etdbjPWGDqfhV/4tKFcORB:vdonFf8IN4gQh9xxweeLPDqfhdn0bQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44040bd01e8b8e4ce0b38f5351b5f794_JaffaCakes118
Files
-
44040bd01e8b8e4ce0b38f5351b5f794_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Ramzey Size: 104KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE