Static task
static1
Behavioral task
behavioral1
Sample
44bfc32f50f0cbb8e46a240e6b82d9dd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44bfc32f50f0cbb8e46a240e6b82d9dd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44bfc32f50f0cbb8e46a240e6b82d9dd_JaffaCakes118
-
Size
12KB
-
MD5
44bfc32f50f0cbb8e46a240e6b82d9dd
-
SHA1
41b5f54b2dbb52ad7b6e9b5e91ea25b59c861cc4
-
SHA256
686023719d98eaeee627d5cf5dfbe6193701b53f9d59d0054ce97db404c29291
-
SHA512
1f630d73f27573bea20851ca3c12a622ccc72b2edd9091ae3fade6137da2af6440e7969b4421b2d917256394a22e8c83ac185c6e4f27f631b5f4d87f12e06593
-
SSDEEP
96:i8FlGSP/Yy34EoCMPq5WMumPgQzqOUZ9KKbQ:FG8/Y5EoCV5Km3N4tbQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44bfc32f50f0cbb8e46a240e6b82d9dd_JaffaCakes118
Files
-
44bfc32f50f0cbb8e46a240e6b82d9dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
20cbdd7346e333dda4e8ea29f754c0b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyWindow
kernel32
ExitProcess
SleepEx
CreateThread
EnumCalendarInfoA
EnumResourceTypesA
EnumSystemLocalesA
GetLastError
QueueUserAPC
Sleep
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 342B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ