Static task
static1
Behavioral task
behavioral1
Sample
44344d68bba801972d50f06c2e39c7c5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
44344d68bba801972d50f06c2e39c7c5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44344d68bba801972d50f06c2e39c7c5_JaffaCakes118
-
Size
22KB
-
MD5
44344d68bba801972d50f06c2e39c7c5
-
SHA1
d0249f7a927f728ea8626c6aa8af037d3e61134c
-
SHA256
0a1a95b919923fa69b77708f26c0ec9e001c377e037ae24e1624d5db178a0eae
-
SHA512
e0e1cd331c4991765a4b6ea9cc39896f962dee30af08fb1f90457f87cf8440629d03f08015c185a701ec79a9a7224d7f143cc5d7be4310365bb2e35e074cf200
-
SSDEEP
384:dr13xuemrduoY9DMD8bV6bwJ55fVY1v1L/YkTt1V8nm+NM2DbaXNbhzmB:d53x+du9AAx6byXf+L/YkTtHizyXNbhE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44344d68bba801972d50f06c2e39c7c5_JaffaCakes118
Files
-
44344d68bba801972d50f06c2e39c7c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE