Static task
static1
Behavioral task
behavioral1
Sample
44159c5e34c6014c97ff7a5bdc2d61a7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
44159c5e34c6014c97ff7a5bdc2d61a7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44159c5e34c6014c97ff7a5bdc2d61a7_JaffaCakes118
-
Size
4KB
-
MD5
44159c5e34c6014c97ff7a5bdc2d61a7
-
SHA1
1bb616844fe04c634732edc43981269b272043d4
-
SHA256
62d381e05cdbf953fb608766ee745fe074b29a6914eb4e25ab5bc8336653229c
-
SHA512
530eb895a21551c7915db06608598fa5906115696db52ca93d5f6b97b44da09a3b7f8b61a3cad0940e405e8be717f9dd0d9b2a169f9bb426fba38a931d21af98
-
SSDEEP
96:mW0Kc2VP0iyDB+u4GbCuHYaoFKnL7HYf1p:mW0Kz0ifGOuHYaQKLrgp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44159c5e34c6014c97ff7a5bdc2d61a7_JaffaCakes118
Files
-
44159c5e34c6014c97ff7a5bdc2d61a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
PF0S0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PF0S1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PF0S2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE