Static task
static1
Behavioral task
behavioral1
Sample
44a5028ba1c2cbeeab8ef2b05c22aca1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44a5028ba1c2cbeeab8ef2b05c22aca1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44a5028ba1c2cbeeab8ef2b05c22aca1_JaffaCakes118
-
Size
2KB
-
MD5
44a5028ba1c2cbeeab8ef2b05c22aca1
-
SHA1
8ccdc0be13bc366452139c68a32b02ced65d6dc5
-
SHA256
4130a2eabc712d907ba26345858ed6f11dea9a7b32309a009f1ef6bf2a2cc083
-
SHA512
0d386ecb7cfa4063f3d5e961d5772077b8997fbf456e33dc61dc65cb30238943f0e6abd957968fe6ef4d2d1faabb79df8d1eed472b32950a1c08563b2ef4caf1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44a5028ba1c2cbeeab8ef2b05c22aca1_JaffaCakes118
Files
-
44a5028ba1c2cbeeab8ef2b05c22aca1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 145KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aedzjnz2 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4vsvxgz8 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lswg12.t Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pmge93lq Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ibyydzh5 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ