Static task
static1
Behavioral task
behavioral1
Sample
44ffd0082dd0a874dfe629ee9728f6d2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
44ffd0082dd0a874dfe629ee9728f6d2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44ffd0082dd0a874dfe629ee9728f6d2_JaffaCakes118
-
Size
286KB
-
MD5
44ffd0082dd0a874dfe629ee9728f6d2
-
SHA1
ff41d3c8c98712e96d946466922931ae29a7a12e
-
SHA256
37efbd9ef9f6d2eaf94633edf0e0d308097bb8872bce6382da78abf2c93ecd6a
-
SHA512
0d8ef7a8455ceadbc63dbf92e814182844a4c04487b0a3362f3559a5345fde5cdcf14a6887ed69be059d07e9cefba24076087490d19b401ee94b102d2713ea57
-
SSDEEP
6144:G0f3HRSRUtEgcJhk2VBBBvlKJQTFK3KqfowwT24nusT7VcW81wJ:VfXRSRUDcJTVB2Q6KTwwC4nP9cW+u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44ffd0082dd0a874dfe629ee9728f6d2_JaffaCakes118
Files
-
44ffd0082dd0a874dfe629ee9728f6d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 285KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE