Static task
static1
Behavioral task
behavioral1
Sample
44062d231a17640e9566d45ffb48929d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44062d231a17640e9566d45ffb48929d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
44062d231a17640e9566d45ffb48929d_JaffaCakes118
-
Size
563KB
-
MD5
44062d231a17640e9566d45ffb48929d
-
SHA1
d38a2db113d00bc8443330143b9a3ad0ecaa3278
-
SHA256
6ea97f474bb49b6cec4c5ec1a9641105e666a7d8a964b936f8cae793d7873292
-
SHA512
681db86f6b027c2bf4fc2c53ec236bcbac174d05770b1a1ef1644d09fa151e8795e5ecfdf5389f7b19b3e87b2c4d70257e02dd2593773dd6a4e32bc5bd9d5516
-
SSDEEP
12288:GcuAgTVFngKr5EUnsjjnNjR9o+y7Ezxia6lLb6eQ2:y95gKrnns91C+yEFWq2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44062d231a17640e9566d45ffb48929d_JaffaCakes118
Files
-
44062d231a17640e9566d45ffb48929d_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.bwaob5 Size: 1KB - Virtual size: 460KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ixd2xy Size: - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 3.0MB
.rbss Size: - Virtual size: 416KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 560KB - Virtual size: 564KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE