Static task
static1
Behavioral task
behavioral1
Sample
44bac5fff083b5d548a2dc3948677d29_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44bac5fff083b5d548a2dc3948677d29_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
44bac5fff083b5d548a2dc3948677d29_JaffaCakes118
-
Size
404KB
-
MD5
44bac5fff083b5d548a2dc3948677d29
-
SHA1
f15bf8a32d81ecc225fad33d691d9ac530fbb56c
-
SHA256
98148e789c1c883d8cce663f4bc8a5dd2cb195ba7b78d4ef7dc63fd2ddf9ac58
-
SHA512
8f7cd9e2d3c5aa0e0c11f830812fb8daf2fd760ff2a35b8a9e5c03cdecd8abd51da5384d2ad2861bdb9f865adf561e992138e065893d4ae6e743c8a77a521508
-
SSDEEP
12288:TGBFgo4vTdYvbshDCojULur+zoIs/THtD/liS+:QP4bIDoYyol2HZ8F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44bac5fff083b5d548a2dc3948677d29_JaffaCakes118
Files
-
44bac5fff083b5d548a2dc3948677d29_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 395KB - Virtual size: 671KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 877B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ