Static task
static1
Behavioral task
behavioral1
Sample
444f5ee810ff212c6f2e125f4fad5cf0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
444f5ee810ff212c6f2e125f4fad5cf0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
444f5ee810ff212c6f2e125f4fad5cf0_JaffaCakes118
-
Size
89KB
-
MD5
444f5ee810ff212c6f2e125f4fad5cf0
-
SHA1
bc157a0664ed34c87e1c15d131b1f5c693770852
-
SHA256
8d62159ff545308fd8e6fcc29ff91ff20017459fca1fa2165dcda65913609681
-
SHA512
fa00b9e7bab164966701d5e37fb549aef012d412d34bdfa0e22178b94d08a4945a0e93270d393e75b9dc6d48c5ec18714c6eb6a087f2302b851211526fb78343
-
SSDEEP
1536:urVOUzwrQn3IMLMGO/vxBTFE8gqjdHLxY9aYhNr+BHORvNPSTJP2jWWQVmVK:qhQQn3rM9HFE8fjdHG9aq4uRvhZzQVP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 444f5ee810ff212c6f2e125f4fad5cf0_JaffaCakes118
Files
-
444f5ee810ff212c6f2e125f4fad5cf0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
hov2 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qu Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE