Static task
static1
Behavioral task
behavioral1
Sample
44df9f36406e181392a67c2879c1005f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44df9f36406e181392a67c2879c1005f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44df9f36406e181392a67c2879c1005f_JaffaCakes118
-
Size
296KB
-
MD5
44df9f36406e181392a67c2879c1005f
-
SHA1
087cb03c7ff4c27b4cdea1fd2c886a3519d2d1ac
-
SHA256
2254aa1baf6c781f0bda41670c7d2a60c9df44ff528a316a8b8fbcce5892c1c0
-
SHA512
5948d65ff0107ec4791d66cebe96ebf2bbace34dcfcfeceefa9882645ab2d82bc737a2a38cd0c341384af8bd9352c4af3bc15fddafe16c907f0df719cea5a856
-
SSDEEP
6144:SWs2CPTsH8Iny3C2B5zT8xQiz5bFmF9xyQeeYP3Ug27g6QAaupm:SWs2CPT28QIvB5/8miz5bFo+pL2hQypm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44df9f36406e181392a67c2879c1005f_JaffaCakes118
Files
-
44df9f36406e181392a67c2879c1005f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 388KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 295KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE